The following is a general comparison of OTP applications that are used to generate one-time passwords for two-factor authentication (2FA) systems using the time-based one-time password (TOTP) or the HMAC-based one-time password (HOTP) algorithms.
Authenticated implementations
| Implementation | Description | Online sync. | Operating system / Platform | Non-default | Import methods | Export methods | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Windows | Mac | Linux | iOS | Android | J2ME | Other | Value length, d | Hash, H | Interval, TX | Epoch, T0 | Steam | QR | JSON | QR | JSON | |||
| Aegis Authenticator | Free and open source app for Android to manage your 2-step verification tokens.1 | Automatic backup to a location of your choosing | No | No | No | No | Yes | No | No | Yes | Yes | Yes | No | Yes | ||||
| Apple Keychain | Native password manager on Apple devices. Not on tvOS.2 | Yes 3 | Yes 4 | Yes | No | Yes | No | No | Apple Vision Pro | Yes | Yes | Yes | Unknown | Unknown | ||||
| "Authenticator" | GNOME circle application. Free and Open Source, community-provided, but not shipped as part of GNOME's Core apps. | No | No | No | Yes | No | No | No | Any desktop or mobile platform where GNOME can run | Yes | Yes | Yes | Yes | Unknown | ||||
| Bitwarden | Open Source Cross platform password manager. 2FA is a premium feature.5 | Yes | Yes | Yes | Yes | Yes | Yes | No | No | Yes | Yes | Yes | Unknown | Yes6 | Yes | Yes | No | Yes |
| Bitwarden Authenticator | Free and open source app for Android and iOS to manage your 2-step verification tokens.7 | No | No | No | No | Yes | Yes | No | No | No | No | No | No | No | ||||
| Ente Auth | Free, open source, cross-platform authenticatior with encrypted cloud sync.8 | Yes | Yes | Yes | Yes | Yes | Yes | No | Web | Unknown | Unknown | Unknown | Unknown | Yes 9 | ||||
| SAASPASS Authenticator 10 | Cross-platform 2FA Authenticator with TOTP & HOTP generator with sharing capabilities and password manager integration. Multiple device support, Mobile app and web access with multiple backup capabilities. | Yes | Yes | Yes | Yes | Yes | Yes | No | No | Yes | Yes | Yes | Yes | Yes | ||||
| Google Authenticator | Yes | No | No | No | Yes | Yes | No | No | No | No | No | No | No | Yes | No | Yes | No | |
| Yandex Key11 | Simple app for phones from Russian company | Yes, manually, for 1 year | No | No | No | Yes | Yes | No | No | Unknown | Unknown | Unknown | Unknown | Unknown | ||||
| IBM Security Verify | Unknown | No | No | No | Yes | Yes | No | No | Unknown | Unknown | Yes | Unknown | Unknown | |||||
| Microsoft Authenticator | Yes | No | No | No | Yes | Yes | No | No | No | No | No | No | No | No | No | No | No | |
| 1Password | Cross-platform password manager12 | Yes | Yes | Yes | Yes | Yes | Yes | No | No | No | Unknown | Unknown | Unknown | Unknown | ||||
| Authy | By Twilio, from 2015, originally Authy.13 Previously available for Chrome.14 | Yes | Discontinued March 19, 202415 | Yes | Yes | No | No | Yes | No | No | No | No | ||||||
| Enpass16 | Password manager by Sinew Software Systems. Syncs over multiple back-ends. | Yes | Yes | Yes | Yes | Yes | Yes | No | No | Yes | No | Yes | Unknown | No | Yes | |||
| FreeOTP17 | Maintained by RedHat, and based on Google Authenticator. | No | No | No | No | Yes | Yes | No | No | Yes | Yes | Yes | No | No | ||||
| oathtool18 | Command-line tool for generating OTP tokens. | No | No | No | Yes | No | No | No | FreeBSD,19 NetBSD,20 OpenBSD21 | Yes | Yes | Yes | Yes | Unknown | ||||
| privacyIDEA Authenticator22 | For use with privacyIDEA Authentication Server, with a secure enrollment process. | No | No | No | No | Yes | Yes | No | No | Yes | Yes | Yes | No | Unknown | ||||
| andOTP23 (unmaintained)24 | Open-source app for Android 4.4+. Compatible with Google Authenticator. | No | No | No | No | No | Yes | No | No | No | No | Yes | No | No | ||||
| Invantive Authenticator25 | Focuses on integration with Invantive Keychain. | No | Yes | No | No | No | No | No | No | Yes | Yes | Yes | Yes | No | ||||
| LastPass Authenticator26 | Cross-platform OTP for mobile devices with support for online backup. | Yes | No | No | No | Yes | Yes | No | No | Yes | Yes | Yes | No | No | Yes | |||
| Symantec VIP | Unknown | No | No | No | Yes | Yes | No | Unknown | Unknown | Unknown | Unknown | Unknown | Unknown | |||||
| TOTP.APP27 | Web-based authenticator not requiring registration. | No | Yes | Yes | Yes | Yes | Yes | No | No | No | No | No | No | No | ||||
| Yubico Authenticator for Desktop28 | By Yubico, for use with Yubikeys. | No | Yes | Yes | Yes | — | — | No | No | Yes | Yes | Yes | No | No | ||||
| Yubico Authenticator for Mobile | — | — | — | Yes | Yes | |||||||||||||
| KeePassXC29 | Password manager | Through user setup with Syncthing,30 or only within the KeeWeb31 online web App32 | Yes | Yes | Yes | No | KeePassDX33 | No | No | Yes | Yes | Yes | No | Yes | Yes | |||
| 2FAS34 | Popular, feature rich open-source two-factor authenticator. No account required. | Online backup/sync via iCloud or Google Drive | Through browser extension connected to mobile app | Yes | Yes | No | No | Yes | Yes | Yes | No | No | Yes | Yes | No | Yes | ||
| 2fast35 | Open-source two-factor authenticator. No account required. Available in Windows App Store. | No | Yes | No | No | No | No | No | No | Unknown | Unknown | Unknown | Unknown | Unknown | ||||
| 2FAuth36 | An open-source PHP web based self-hosted OTP generator, designed for both mobile and desktop. | Yes, web based | No | No | Yes | Yes | Yes | No | Yes | |||||||||
| totp-cli37 | Popular, feature rich open-source two-factor authenticator. No account required. | Manually | No | Yes | Yes | No | No | No | No | Unknown | Unknown | Unknown | Unknown | Unknown | ||||
| Open Authenticator38 | Free, open-source and multiplatform app to manage your TOTPs. | Yes, requires a subscription for more than 6 TOTPs | Yes | Yes | No | Yes | Yes | No | No | Yes | Yes | Yes | No | No | ||||
| TOTP ME39 | Free, open-source J2ME MIDlet app to manage your TOTPs. | Manually | Using MicroEmulator app40 | Unknown | Using J2ME Loader app41 | Yes | Any with J2ME support or emulator | Yes | Yes | Yes | Time correction in seconds | No | ||||||
| Hotpants42 | Free, open-source J2ME MIDlet app to manage your TOTPs and HOTPs. | Import via scanning QR code on screen | No | No | No | No | No | Yes | No | Unknown | Unknown | Unknown | Unknown | No | ||||
| Tessera43 | Free, open-source Qt for Symbian and desktop app to manage your TOTPs. | Unknown | Initial support for desktop | No | Could be ported | No | Symbian S60 5th Edition | Unknown | Unknown | Unknown | Unknown | Unknown | ||||||
| GAuth Authenticator44 | A simple application for multi-factor authentication, written in HTML using jQuery Mobile (and PhoneGap), jsSHA and LocalStorage. | Unknown | Yes | Yes | Yes | No | No | No | No | Unknown | Unknown | Unknown | Unknown | Unknown | ||||
| Authenticator App by 2Stable45 | Secure two-factor authentication app for iPhone, iPad, iPod, Apple Watch and Mac. | Yes | No | Yes | No | Yes | No | No | No | Yes | Yes | Yes | Unknown | No | ||||
See also
References
"Aegis Authenticator - Secure 2FA app for Android". Aegis Authenticator. Retrieved 29 April 2023. https://getaegis.app/ ↩
"Sending passwords to other users or Apple devices". Apple Support. 18 February 2021. Retrieved 23 August 2024. https://support.apple.com/en-gb/guide/security/sec8839a8de2/web ↩
"Set up iCloud Keychain". Apple Support. 5 August 2024. Archived from the original on 6 August 2024. Retrieved 23 August 2024. https://support.apple.com/en-us/109016 ↩
"Set up iCloud Passwords on your Windows computer — in: iCloud for Windows User Guide". Apple Support. Retrieved 23 August 2024. https://support.apple.com/en-gb/guide/icloud-windows/icw2babf5e03/1.0/icloud/1.0 ↩
"Pricing for Individuals and Families | Bitwarden". Bitwarden. Retrieved 23 March 2023. https://bitwarden.com/pricing/ ↩
"Steam Guard TOTPs". Bitwarden. Retrieved 23 March 2023. https://bitwarden.com/help/authenticator-keys/#steam-guard-totps ↩
"Bitwarden just launched a new authenticator app. Here's what it means to users. | Bitwarden Blog". Bitwarden. https://bitwarden.com/blog/bitwarden-just-launched-a-new-authenticator-app-heres-what-it-means-to-users/ ↩
"Ente Auth - Open source 2FA authenticator, with E2EE backups". Ente. Retrieved 16 October 2024. https://ente.io/auth/ ↩
"Migrating from Steam Authenticator". Ente. Retrieved 16 October 2024. https://help.ente.io/auth/migration-guides/steam/ ↩
"The 5 Best Two-Factor Authentication Apps for iPhone & Android". Gadget Hacks. 28 February 2020. Retrieved 28 February 2020. https://smartphones.gadgethacks.com/how-to/5-best-two-factor-authentication-apps-for-iphone-android-0186751/ ↩
"Yandex Key - Yandex ID. Help". yandex.com. Retrieved 28 May 2024. https://yandex.com/support/id/authorization/twofa.html ↩
"Use 1Password as an authenticator for sites with two-factor authentication". 1Password. Retrieved 7 September 2018. https://support.1password.com/one-time-passwords/ ↩
Lardinois, Frederic (24 February 2015). "Twilio Acquires Two-Factor Authentication Service Authy". TechCrunch. Retrieved 5 March 2018. https://techcrunch.com/2015/02/24/twilio-acquires-two-factor-authentication-service-authy/ ↩
"Authy for Chrome App & Extension End of Life". Authy Support. Retrieved 14 February 2024. https://support.authy.com/hc/en-us/articles/360042973993-Authy-for-Chrome-App-Extension-End-of-Life ↩
"Business customer guide: End of Life (EOL) for use of Authy API with Twilio Authy Desktop apps". Authy Support. Retrieved 14 February 2024. https://support.authy.com/hc/en-us/articles/17592416719003-Business-customer-guide-End-of-Life-EOL-for-use-of-Authy-API-with-Twilio-Authy-Desktop-apps ↩
"Best password manager for iOS, Android, Windows, Linux, Mac | Enpass". www.enpass.io. Retrieved 7 September 2018. https://www.enpass.io/ ↩
"FreeOTP". freeotp.github.io. https://freeotp.github.io ↩
"OATH Toolkit". www.nongnu.org. Retrieved 7 September 2018. http://www.nongnu.org/oath-toolkit/ ↩
"FreshPorts -- security/oath-toolkit: Library, tools, and PAM module for OATH authentication". FreeBSD Ports. https://www.freshports.org/security/oath-toolkit/ ↩
"security/oath-toolkit - The NetBSD Packages Collection". https://cdn.netbsd.org/pub/pkgsrc/current/pkgsrc/security/oath-toolkit/index.html ↩
"ports/security/oath-toolkit/". https://cvsweb.openbsd.org/ports/security/oath-toolkit/ ↩
"privacyIDEA Authenticator". GitHub. Retrieved 7 September 2018. https://github.com/privacyidea/privacyidea-authenticator/ ↩
"andOTP/andOTP". GitHub. https://github.com/andOTP/andOTP ↩
flocke (15 July 2017). "[Unmaintained][App][4.4+][Open source] andOTP - Open source two-factor authentication for Android". XDA Forums. Retrieved 12 March 2023. https://forum.xda-developers.com/t/unmaintained-app-4-4-open-source-andotp-open-source-two-factor-authentication-for-android.3636993/page-6#post-87021655 ↩
B.V., Invantive Software. "Invantive Authenticator". two-step-verification.solutions. Retrieved 7 September 2018. https://two-step-verification.solutions ↩
"LastPass - LastPass Authenticator". lastpass.com. Retrieved 7 September 2018. https://lastpass.com/auth/ ↩
"Online one-time password generator / TOTP (Google Authenticator) Online". totp.app. Retrieved 7 September 2018. https://totp.app/ ↩
"Using Your YubiKey with Authenticator Codes : Yubico Support". support.yubico.com. Archived from the original on 2 October 2018. Retrieved 11 March 2023. https://web.archive.org/web/20181002180531/https://support.yubico.com/support/solutions/articles/15000006419-using-your-yubikey-with-authenticator-codes ↩
Team, KeePassXC. "KeePassXC 2.2.0 released - KeePassXC". keepassxc.org. https://keepassxc.org/blog/2017-06-26-2.2.0-released/ ↩
"KeePassXC + KeePassDX (Android) Sync guide. A complete starting guide for new users". reddit.com. 10 September 2021. Retrieved 7 July 2023. https://reddit.com/r/KeePass/comments/plmgb6/keepassxc_keepassdx_android_sync_guide_a_complete/ ↩
"Free Password Manager Compatible with KeePass: KeeWeb". keeweb.info. Retrieved 7 July 2023. https://keeweb.info ↩
"KeeWeb". keeweb.info. Retrieved 7 July 2023. https://app.keeweb.info ↩
"KeePassDX". keepassdx.com. Retrieved 7 July 2023. https://www.keepassdx.com/ ↩
"2FA Authenticator App (2FAS)". 2FAS. Retrieved 12 March 2023. https://2fas.com/ ↩
"2fast Authenticator App (2fast)". 2fast-team. Retrieved 14 November 2024. https://2fast-app.de/ ↩
"GitHub - Bubka/2FAuth: A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes". GitHub. Bubka. Retrieved 19 March 2023. https://github.com/Bubka/2FAuth ↩
"Authy/Google Authenticator like TOTP CLI tool written in Go". GitHub. Retrieved 28 May 2024. https://github.com/yitsushi/totp-cli ↩
"Open Authenticator : Secure your online accounts with a free, open-source and lovely-crafted app". Skyost. Retrieved 22 July 2024. https://openauthenticator.app ↩
Cacek, Josef (14 April 2024), kwart/totp-me, retrieved 12 August 2024 https://github.com/kwart/totp-me ↩
"totp-me - TOTP for Java ME - Google authenticator". SourceForge. https://totpme.sourceforge.net/ ↩
Shakarun, Nikita, nikita36078/J2ME-Loader https://github.com/nikita36078/J2ME-Loader ↩
Matti (4 August 2024), baumschubser/hotpants, retrieved 12 August 2024 https://github.com/baumschubser/hotpants ↩
Janiszewski, Maciej (10 April 2024), ksiazkowicz/Tessera, retrieved 12 August 2024 https://github.com/ksiazkowicz/Tessera ↩
Gerard Braad. "gauth.apps.gbraad.nl". Retrieved 16 September 2024. https://gauth.apps.gbraad.nl/ ↩
"Authenticator App by 2Stable". Retrieved 6 November 2024. https://authenticator.2stable.com ↩