Authenticator

Add an authenticator. One you can leave.

As of 17 Oct 2026, 8 authenticators let you export. Codes beat SMS. They don't beat a phishing page.

Every authenticator here passed the rulesApps that fail one are not listed. The rules
  1. Lets you exportEncrypted export is best. Plain export still passes. No export fails.
  2. Sync is end-to-end, or there is no syncA cloud the provider can read fails.
  3. App lockA PIN, password or biometrics before the codes show.

What codes do

  • Beat SMS as a second factor
  • Stay usable if you export them before you lose the phone

What they don't

  • Protect you from a phishing page that asks for the code. Passkeys do.
  • Survive a lost phone if you never exported

The top 3

Best offline

Aegis

Beem Development

An encrypted vault that stays on the phone. Export when you want, no account.

Owner
Beem Development · Netherlands
Export
Encrypted
Sync
None

Checked 17 Oct 2026—Encrypted export

Get it on Google PlayDetails
Best for easy backup

2FAS

Two Factor Authentication Service

A simple backup you can restore, with an app lock and an export.

Owner
Two Factor Authentication Service, Inc. · United States
Export
Encrypted
Sync
End-to-end encrypted

Checked 17 Oct 2026—Encrypted export

Get it on Google PlayDetails

Also great. Five more.

Picked by hand, 17 Oct 2026
Skip these

Authenticators that won't let you leave.

If you cannot export, your codes are locked in one app. Lose the phone, lose the logins.

More on Be careful

  • No exportAn authenticator that will not let you take the codes with you fails the first rule.
    Our gate; we name no app · source
  • Asks for SMS or contactsA code app does not need your messages or your address book.
    Behaviour only; we name no app · source
AllFreeUpdated this year
8 apps · sorted by name
All 8 apps
App ▼ What it does Price Updated ▼ Min Android ▼ Get it
Proton AuthenticatorTop 8Proton AG
 Codes that sync with your Proton account — Hand-checked 17 Oct 2026 — Google Play
KeePassDXTop 8Kunzisoft
 A KeePass vault on the phone, including TOTP codes Free 27 Sept 2026 Android 4.4+ F-Droid
FreeOTP+Top 8FreeOTP+ contributors
 Bare codes, fast — Hand-checked 17 Oct 2026 — F-Droid
Ente AuthTop 8Ente
 Codes with end-to-end sync and an encrypted export — Hand-checked 17 Oct 2026 — Google Play
Bitwarden AuthenticatorTop 8Bitwarden
 Codes next to a Bitwarden vault — Hand-checked 17 Oct 2026 — Google Play
Authenticator ProTop 8Jamie Hoyle
 Encrypted backup, app lock, export — Hand-checked 17 Oct 2026 — F-Droid
AegisTop 8Beem Development
 An encrypted vault that stays on the phone — Hand-checked 17 Oct 2026 — Google Play
2FASTop 8Two Factor Authentication Service
 A simple backup you can restore — Hand-checked 17 Oct 2026 — Google Play

'Top 8' marks the apps above. Data from F-Droid and hand-checked entries, as of 17 Oct 2026.

Questions

Is a code better than SMS?

Yes. SMS can be stolen. Codes still fail if a fake page asks for the number. Passkeys handle that.

What if I lose the phone?

Export first. If you never exported, the codes are gone.

How we pick the top 8: a person tries the apps and checks each maker's page, then writes the labels down with a date. How we choose