Comparison of OTP applications
 | This article may contain original research. (April 2026) |
The following is a general comparison of OTP applications that are used to generate one-time passwords for two-factor authentication (2FA) systems using the time-based one-time password (TOTP), the HMAC-based one-time password (HOTP) algorithms or Mobile-OTP (mOTP),[1] which is an older, open source, 2FA system for mobile phones that combines a user’s PIN, time and a per-device secret to generate OTPs. It also lists apps that support proprietary authentication methods, like those used by Steam or Yandex.
Summary information
[edit]Standalone authenticator applications
[edit]The following is an overview of authenticator applications that operate independently and are not integrated into password managers.
| Name | License | Operating system support | Browser integration | Delivery format |
|---|---|---|---|---|
| 2fa[2] | EUPL v1.2[3] | Android | Unknown | Local installation with backup via Google Drive |
| 2FAS[4] | BUSL 1.1[5] | Android, iOS, iPadOS, watchOS | Yes, autofill via browser extension connected to mobile app | Local installation with sync via iCloud or Google Drive |
| 2FAuth[6] | AGPLv3[7] | Cross-platform web application | No | Local installation |
| 2fast[8] | GPLv3[9] | Windows | Unknown | Local installation |
| Aegis Authenticator[10] | GPLv3[11] | Android | Unknown | Local installation with cloud sync |
| andOTP[12] (unmaintained)[13] | MIT[14] | Android, iOS, Linux, macOS, Windows | Unknown | Local installation with cloud sync |
| Authenticator App by 2Stable[15] | Proprietary / Freemium | iOS, iPadOS, macOS, watchOS, browser extension for Chrome, Edge, Firefox and more | Unknown | Local installation |
| Authy | Proprietary / Freeware | Android, iOS, iPadOS, watchOS. Dropped support for Linux, Mac and Windows | Unknown | Local installation |
| Bitwarden Authenticator[16] | GPLv3[17][18] | Android, iOS, iPadOS, visionOS | Unknown | Local installation with backup via iCloud or Google Drive |
| Authenticator[19] | GPL-3.0-or-later | Linux | Unknown | Local installation |
| Duo Mobile[20] | Proprietary / Freeware | Android, iOS, iPadOS, watchOS | Unknown | Local installation |
| Ente Auth[21] | AGPLv3 | Android, iOS, iPadOS, Linux, macOS, Windows | Unknown | Local installation with cloud sync |
| Epic Authenticator[22] | Proprietary / Freeware | Android, iOS, iPadOS, watchOS | Unknown | Local installation |
| FreeOTP[23] | Apache 2.0[24] | Android, iOS, iPadOS | Unknown | Local installation |
| GAuth Authenticator[25] | GPL[26] | Web based app | No | Local installation or hosted web application |
| Google Authenticator | Proprietary / Freeware | Android, iOS, iPadOS, Blackberry, Wear OS | Unknown | Local installation with cloud sync |
| Hotpants[27] | GPLv2 | J2ME | Unknown | Local installation |
| IBM Verify | Proprietary / Freeware | Android, iOS, iPadOS | Unknown | Local installation |
| LastPass Authenticator[28] | Proprietary | Android, iOS, iPadOS, watchOS | Yes, autofill via browser extension connected to mobile app | Local installation with cloud sync |
| Microsoft Authenticator | Proprietary | Android, iOS, iPadOS, visionOS | No | Local installation with cloud sync |
| OATH Toolkit[29] | Libraries: LGPLv2 or later Tools: GPLv3 or later |
Linux | No | Local installation |
| Open Authenticator[30] | GPLv3[31] | Android, iOS, iPadOS, Linux, macOS, Windows | No | Local installation |
| Proton Authenticator[32] | GPL-3.0-or-later | Android, iOS, macOS, Windows, Linux | Unknown | Local installation with cloud sync |
| SAASPASS Authenticator [33] | Proprietary | Android, iOS, iPadOS, watchOS, macOS | No | Local installation with cloud sync |
| Stratum[34] | GPLv3 | Android, Wear OS | Unknown | Local installation with cloud sync |
| Symantec VIP | Proprietary | Android, iOS, watchOS, macOS, Windows | Unknown | Local installation |
| Tessera[35] | GPLv3 | Symbian S60 5th Edition, initial support for desktop | Unknown | Local installation |
| Tokn[36] | GPLv3 | Android | Unknown | Local installation |
| TOTP ME[37] | Apache 2.0 | J2ME | Unknown | Local installation |
| Yandex Key[38] | Proprietary | Android, iOS, iPadOS | Unknown | Local installation |
| Yubico Authenticator for Desktop[39] | Proprietary | Linux, macOS, Windows | Unknown | Local installation |
| Yubico Authenticator for Mobile | Proprietary | Android, iOS | Unknown | Local installation |
Combined authenticator and password manager applications
[edit]The following is an overview of password managers that include an integrated authenticator feature.
Authenticated implementations
[edit]| Implementation | Description | Online sync. | Operating system / Platform | Default | Non-default | Import methods | Export methods | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Windows | Mac | Linux | iOS | Android | Other | HOTP | Value length, d | Hash, H | Interval, TX | Epoch, T0 | Other: Steam or mOTP | QR | JSON | QR | JSON | |||
| 1Password | Cross-platform password manager[49] | Yes | Yes | Yes | Yes | Yes | Yes | No | Unknown | No | Unknown | Unknown | Unknown | Unknown | ||||
| 2FAS[4] | Popular, feature rich open-source two-factor authenticator. No account required. | Online backup/sync via iCloud or Google Drive | Through browser extension connected to mobile app | Yes | Yes | No | Yes | Yes | Yes | Yes | No | No | Yes | Yes | No | Yes | ||
| 2FAuth[6] | An open-source PHP web based self-hosted OTP generator, designed for both mobile and desktop. | Yes, web based | No | Unknown | Yes | Yes | Yes | No | Steam | |||||||||
| 2fast[8] | Open-source two-factor authenticator. No account required. Available in Windows App Store. | No | Yes | No | No | No | No | No | Unknown | Unknown | Unknown | Unknown | Unknown | Unknown | ||||
| Aegis Authenticator | Free and open source app for Android to manage your 2-step verification tokens.[10] | Automatic backup to a location of your choosing | No | No | No | No | Yes | No | Unknown | Yes | Yes | Yes | No | Steam | Yes | Yes | Yes | Yes |
| andOTP[12] (unmaintained - json file handled by Aegis)[13] | Open-source app for Android 4.4+. Compatible with Google Authenticator. | No | No | No | No | No | Yes | No | Unknown | No | No | Yes | No | No | Yes | Yes | ||
| Apple Keychain | Native password manager on Apple devices. Not on tvOS.[50] | Yes [51] | Yes [52] | Yes | No | Yes | No | Apple Vision Pro | Unknown | Yes | Yes | Yes | Unknown | Unknown | Yes | The Setup URL (otpauth://) can be manually copied for each item from the edit screen of the Passwords app | ||
| Authenticator[19] | GNOME circle application. Free and Open Source, community-provided, but not shipped as part of GNOME's Core apps | No | No | No | Yes | No | No | Any desktop or mobile platform where GNOME can run | Yes | Yes | Yes | Yes | Yes | Steam | Yes | Yes | Yes | Yes |
| Authenticator App by 2Stable[15] | Secure two-factor authentication app for iPhone, iPad, iPod, Apple Watch and Mac. Freemium app with max 2 accounts in the free version.[53] | Yes | No | Yes | No | Yes | No | No | Unknown | Yes | Yes | Yes | Unknown | No | ||||
| Authy | By Twilio, from 2015, originally Authy.[54] Previously available for Chrome.[55] | Yes | Discontinued March 19, 2024[56] | Yes | Yes | No | Unknown | Yes | No | No | No | No | ||||||
| Bitwarden | Open Source Cross platform password manager. 2FA is a premium feature.[57] | Yes | Yes | Yes | Yes | Yes | Yes | No | Unknown | Yes | Yes | Yes | Unknown | Steam[58] | Yes | Yes | No | Yes |
| Bitwarden Authenticator | Free and open source app for Android and iOS to manage your 2-step verification tokens.[59] | No | No | No | No | Yes | Yes | No | Unknown | No | No | No | No | No | ||||
| Duo Mobile[20] | Free 2FA authenticator provided by Cisco | Yes, through iCloud or Google Drive | No | No | No | Yes | Yes | No | Unknown | Unknown | Unknown | Unknown | Unknown | No | ||||
| Enpass[60] | Password manager by Sinew Software Systems. Syncs over multiple back-ends. | Yes | Yes | Yes | Yes | Yes | Yes | No | Unknown | Yes | No | Yes | Unknown | No | Yes | |||
| Ente Auth | Free, open source, cross-platform authenticatior with encrypted cloud sync.[61] | Yes | Yes | Yes | Yes | Yes | Yes | Web | Unknown | Unknown | Unknown | Unknown | Unknown | Steam [62] | ||||
| FreeOTP[23] | Maintained by RedHat, and based on Google Authenticator. | No | No | No | No | Yes | Yes | No | Unknown | Yes | Yes | Yes | No | No | ||||
| GAuth Authenticator[25] | A simple application for multi-factor authentication, written in HTML using jQuery Mobile (and PhoneGap), jsSHA and LocalStorage. | Unknown | Yes | Yes | Yes | No | No | No | Unknown | Unknown | Unknown | Unknown | Unknown | Unknown | ||||
| Google Authenticator | Yes | No | No | No | Yes | Yes | No | Yes | No | No | No | No | No | Yes | No | Yes | No | |
| Hotpants[27] | Free, open-source J2ME MIDlet app to manage your TOTPs and HOTPs. | Import via scanning QR code on screen | No | No | No | No | No | J2ME | Yes | Unknown | Unknown | Unknown | Unknown | No | ||||
| IBM Security Verify | Unknown | No | No | No | Yes | Yes | No | Unknown | Unknown | Unknown | Yes | Unknown | Unknown | |||||
| Invantive Authenticator[63] | Focuses on integration with Invantive Keychain. | No | Yes | No | No | No | No | No | Unknown | Yes | Yes | Yes | Yes | No | ||||
| KeePassXC[64] | Password manager | Through user setup with Syncthing,[65][better source needed] or only within the KeeWeb[66] online web App[67] | Yes | Yes | Yes | No | KeePassDX[68] | No | Unknown | Yes | Yes | Yes | No | Steam | Yes | |||
| LastPass Authenticator[28] | Cross-platform OTP for mobile devices with support for online backup. | Yes | No | No | No | Yes | Yes | No | Unknown | Yes | Yes | Yes | No | No | Yes | |||
| Microsoft Authenticator | Yes | No | No | No | Yes | Yes | No | No | No | No | No | No | No | No | No | No | No | |
| OATH Toolkit[29] | Command-line tool for generating OTP tokens. | No | No | No | Yes | No | No | FreeBSD,[69] NetBSD,[70] OpenBSD[71] | Unknown | Yes | Yes | Yes | Yes | Unknown | ||||
| Open Authenticator[30] | Free, open-source and multiplatform app to manage your TOTPs. | Yes, requires a subscription for more than 6 TOTPs | Yes | Yes | Yes | Yes | Yes | No | No | Yes | Yes | Yes | No | No | Yes | No | Yes | No |
| privacyIDEA Authenticator[72] | For use with privacyIDEA Authentication Server, with a secure enrollment process. | No | No | No | No | Yes | Yes | No | No | Yes | Yes | Yes | No | Unknown | ||||
| Proton Authenticator[32] | Open source and available on every device. Securely sync and backup 2FA codes easily. No account required. | Yes, via a Proton Account, or via iCloud on Apple devices | Yes | Yes | Yes | Yes | Yes | No | No | Yes | Yes | Yes | No | Steam | Yes | Yes | No | Yes |
| SAASPASS Authenticator [33] | Cross-platform 2FA Authenticator with TOTP & HOTP generator with sharing capabilities and password manager integration. Multiple device support, Mobile app and web access with multiple backup capabilities. | Yes | Yes | Yes | Yes | Yes | Yes | No | Yes | Yes | Yes | Yes | Yes | Steam | ||||
| Stratum[34] | Free and open-source two-factor authentication app for Android | Unknown | No | No | No | No | Yes | WearOS | Yes | Unknown | Unknown | Unknown | Unknown | Steam & mOTP | ||||
| Symantec VIP | Unknown | No | No | No | Yes | Yes | No | Unknown | Unknown | Unknown | Unknown | Unknown | Unknown | |||||
| Tessera[35] | Free, open-source Qt for Symbian and desktop app to manage your TOTPs. | Unknown | Initial support for desktop | No | Could be ported | Symbian S60 5th Edition | Unknown | Unknown | Unknown | Unknown | Unknown | Unknown | ||||||
| Tokn[36] | Free and open-source two-factor authentication app for Android | No | No | No | No | No | Yes | No | Yes | Unknown | Unknown | Unknown | Unknown | No | Yes | Yes | Yes | Yes |
| TOTP ME[37] | Free, open-source J2ME MIDlet app to manage your TOTPs. | Manually | Using MicroEmulator app[73] | Unknown | Using J2ME Loader app[74] | J2ME or any with J2ME support or emulator | Unknown | Yes | Yes | Yes | Time correction in seconds | No | ||||||
| Yandex Key[38] | Simple app for phones from Russian company | Yes, manually, for 1 year | No | No | No | Yes | Yes | No | No | Unknown | Unknown | Unknown | Unknown | Unknown | ||||
| Yubico Authenticator for Desktop[39] | By Yubico, for use with Yubikeys. | No | Yes | Yes | Yes | N/a | N/a | No | No | Yes | Yes | Yes | No | No | ||||
| Yubico Authenticator for Mobile | N/a | N/a | N/a | Yes | Yes | |||||||||||||
See also
[edit]References
[edit]- ↑ "Mobile-OTP: Strong Two-Factor Authentication with Mobile Phones". Mobile-OTP. 15 December 2003. Retrieved 11 September 2025.
- ↑ "979". 979. Retrieved 15 May 2026.
- ↑ "2fa/LICENSE - 979/2fa". 14 February 2026. Retrieved 23 August 2026 – via Codeberg.
- 1 2 "2FA Authenticator App (2FAS)". 2FAS. Retrieved 12 March 2023.
- ↑ "2fas-pass-browser-extension/LICENSE · twofas/2fas-pass-browser-extension". 30 June 2025. Retrieved 23 August 2026 – via GitHub.
- 1 2 "GitHub - Bubka/2FAuth: A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes". GitHub. Bubka. Retrieved 19 March 2023.
- ↑ "2FAuth/LICENSE · Bubka/2FAuth". 10 January 2020. Retrieved 23 August 2026 – via GitHub.
- 1 2 "2fast Authenticator App (2fast)". 2fast-team. Retrieved 14 November 2024.
- ↑ "2fast/LICENSE · 2fast-team/2fast". GitHub. 12 February 2021. Retrieved 23 August 2026.
- 1 2 "Aegis Authenticator - Secure 2FA app for Android". Aegis Authenticator. Retrieved 29 April 2023.
- ↑ "Aegis/LICENSE · beemdevelopment/Aegis". 15 August 2016. Retrieved 23 August 2026 – via GitHub.
- 1 2 "andOTP/andOTP". GitHub.
- 1 2 flocke (15 July 2017). "[Unmaintained][App][4.4+][Open source] andOTP - Open source two-factor authentication for Android". XDA Forums. Retrieved 12 March 2023.
- ↑ "andOTP/LICENSE.txt · andOTP/andOTP". 9 June 2020. Retrieved 23 August 2026 – via GitHub.
- 1 2 "Authenticator App by 2Stable". Retrieved 6 November 2024.
- ↑ "Bitwarden Authenticator". Bitwarden. Retrieved 12 May 2026.
- ↑ "ios/LICENSE.txt · bitwarden/ios". 30 May 2024. Retrieved 23 August 2026 – via GitHub.
- ↑ "android/LICENSE.txt · bitwarden/android". 20 June 2024. Retrieved 23 August 2026 – via GitHub.
- 1 2 "Authenticator – Apps for GNOME". Gnome Circle. Retrieved 10 September 2025.
- 1 2 "Third-Party Accounts - Guide to Duo Authentication". Duo. Retrieved 11 August 2025.
- ↑ "Ente Auth - Open source 2FA authenticator, with E2EE backups". Ente. Retrieved 12 May 2026.
- ↑ "Epic Authenticator App – Supported Devices". Epic Systems.
Epic Authenticator is available only for iOS, Android, and Apple Watch; no desktop versions (Windows or macOS) are provided.
- 1 2 "FreeOTP". freeotp.github.io.
- ↑ "freeotp-android/COPYING · freeotp/freeotp-android". GitHub. 21 October 2013. Retrieved 23 August 2026.
- 1 2 Gerard Braad. "gauth.apps.gbraad.nl". Retrieved 16 September 2024.
- ↑ "gauth/README.md · gbraad-apps/gauth". 1 May 2023. Retrieved 23 August 2026 – via GitHub.
- 1 2 Matti (4 August 2024), baumschubser/hotpants, retrieved 12 August 2024
- 1 2 "LastPass - LastPass Authenticator". lastpass.com. Retrieved 7 September 2018.
- 1 2 "OATH Toolkit". www.nongnu.org. Retrieved 7 September 2018.
- 1 2 "Open Authenticator : Secure your online accounts with a free, open-source and lovely-crafted app". Skyost. Retrieved 22 July 2024.
- ↑ "openauthenticator/LICENSE · openauthenticator-app/openauthenticator". GitHub. 8 July 2024. Retrieved 23 August 2026.
- 1 2 "Proton Authenticator: Private, secure 2FA authenticator | Proton". Proton. Retrieved 9 September 2025.
- 1 2 "The 5 Best Two-Factor Authentication Apps for iPhone & Android". Gadget Hacks. 28 February 2020. Retrieved 28 February 2020.
- 1 2 "Open-source two-factor authentication app - Stratum". Stratum. Retrieved 10 September 2025.
- 1 2 Janiszewski, Maciej (10 April 2024), ksiazkowicz/Tessera, retrieved 12 August 2024
- 1 2 "Tokn". Retrieved 6 June 2026.
- 1 2 Cacek, Josef (14 April 2024), kwart/totp-me, retrieved 12 August 2024
- 1 2 "Yandex Key - Yandex ID. Help". yandex.com. Retrieved 28 May 2024.
- 1 2 "Using Your YubiKey with Authenticator Codes : Yubico Support". support.yubico.com. Archived from the original on 2 October 2018. Retrieved 11 March 2023.
- ↑ "Pricing for Individuals and Families | Bitwarden". Bitwarden. Retrieved 8 May 2023.
- ↑ "KeePassXC: Getting Started Guide". keepassxc.org. 7 January 2025. Retrieved 8 January 2026.
{{cite web}}: CS1 maint: deprecated archival service (link) - ↑ "KeePassXC-Browser – Get this Extension for 🦊 Firefox (en-US)". addons.mozilla.org. Retrieved 8 January 2026.
- ↑ "KeePassXC-Browser - Chrome Web Store". chromewebstore.google.com. Retrieved 8 January 2026.
- ↑ "KeePassXC-Browser - Microsoft Edge Addons". microsoftedge.microsoft.com. Retrieved 8 January 2026.
- ↑ keepassxreboot/keepassxc-browser, KeePassXC, 7 January 2026, retrieved 8 January 2026
- ↑ "iCloud Passwords – Get this Extension for 🦊 Firefox (en-GB)". Add-ons for Firefox. Retrieved 10 September 2025.
- ↑ "iCloud Passwords - Chrome Web Store". Chrome Web Store. Retrieved 10 September 2025.
- ↑ "iCloud Passwords - Microsoft Edge Addons". Microsoft Edge Addons. Retrieved 10 September 2025.
- ↑ "Use 1Password as an authenticator for sites with two-factor authentication". 1Password. Retrieved 7 September 2018.
- ↑ "Sending passwords to other users or Apple devices". Apple Support. 18 February 2021. Retrieved 23 August 2024.
- ↑ "Set up iCloud Keychain". Apple Support. 5 August 2024. Archived from the original on 6 August 2024. Retrieved 23 August 2024.
- ↑ "Set up iCloud Passwords on your Windows computer — in: iCloud for Windows User Guide". Apple Support. Retrieved 23 August 2024.
- ↑ "Pricing - Free vs Premium | Authenticator App". Retrieved 29 May 2025.
- ↑ Lardinois, Frederic (24 February 2015). "Twilio Acquires Two-Factor Authentication Service Authy". TechCrunch. Retrieved 5 March 2018.
- ↑ "Authy for Chrome App & Extension End of Life". Authy Support. Retrieved 14 February 2024.
- ↑ "Business customer guide: End of Life (EOL) for use of Authy API with Twilio Authy Desktop apps". Authy Support. Retrieved 14 February 2024.
- ↑ "Pricing for Individuals and Families | Bitwarden". Bitwarden. Retrieved 23 March 2023.
- ↑ "Steam Guard TOTPs". Bitwarden. Retrieved 23 March 2023.
- ↑ "Bitwarden just launched a new authenticator app. Here's what it means to users. | Bitwarden Blog". Bitwarden.
- ↑ "Best password manager for iOS, Android, Windows, Linux, Mac | Enpass". www.enpass.io. Retrieved 7 September 2018.
- ↑ "Ente Auth - Open source 2FA authenticator, with E2EE backups". Ente. Retrieved 16 October 2024.
- ↑ "Migrating from Steam Authenticator". Ente. Retrieved 16 October 2024.
- ↑ B.V., Invantive Software. "Invantive Authenticator". two-step-verification.solutions. Retrieved 7 September 2018.
- ↑ Team, KeePassXC. "KeePassXC 2.2.0 released - KeePassXC". keepassxc.org.
- ↑ "KeePassXC + KeePassDX (Android) Sync guide. A complete starting guide for new users". reddit.com. 10 September 2021. Retrieved 7 July 2023.
- ↑ "Free Password Manager Compatible with KeePass: KeeWeb". keeweb.info. Retrieved 7 July 2023.
- ↑ "KeeWeb". keeweb.info. Retrieved 7 July 2023.
- ↑ "KeePassDX". keepassdx.com. Retrieved 7 July 2023.
- ↑ "FreshPorts -- security/oath-toolkit: Library, tools, and PAM module for OATH authentication". FreeBSD Ports.
- ↑ "security/oath-toolkit - The NetBSD Packages Collection".
- ↑ "ports/security/oath-toolkit/".
- ↑ "privacyIDEA Authenticator". GitHub. Retrieved 7 September 2018.
- ↑ "totp-me - TOTP for Java ME - Google authenticator". SourceForge.
- ↑ Shakarun, Nikita, nikita36078/J2ME-Loader