Authenticator

Add an authenticator. One you can leave.

As of 17 Oct 2026, 8 authenticators let you export. Codes beat SMS. They don't beat a phishing page.

Every authenticator here passed the rulesApps that fail one are not listed. The rules
  1. Lets you exportEncrypted export is best. Plain export still passes. No export fails.
  2. Sync is end-to-end, or there is no syncA cloud the provider can read fails.
  3. App lockA PIN, password or biometrics before the codes show.

What codes do

  • Beat SMS as a second factor
  • Stay usable if you export them before you lose the phone

What they don't

  • Protect you from a phishing page that asks for the code. Passkeys do.
  • Survive a lost phone if you never exported

The top 3

Best offline

Aegis

Beem Development

An encrypted vault that stays on the phone. Export when you want, no account.

Owner
Beem Development · Netherlands
Export
Encrypted
Sync
None

Checked 17 Oct 2026—Encrypted export

Best for easy backup

2FAS

Two Factor Authentication Service

A simple backup you can restore, with an app lock and an export.

Owner
Two Factor Authentication Service, Inc. · United States
Export
Encrypted
Sync
End-to-end encrypted

Checked 17 Oct 2026—Encrypted export

Also great. Five more.

Picked by hand, 17 Oct 2026
Skip these

Authenticators that won't let you leave.

If you cannot export, your codes are locked in one app. Lose the phone, lose the logins.

More on Be careful

  • No exportAn authenticator that will not let you take the codes with you fails the first rule.
    Our gate; we name no app · source
  • Asks for SMS or contactsA code app does not need your messages or your address book.
    Behaviour only; we name no app · source
1 apps · sorted by name
All 1 apps
App ▲ What it does Price Updated ▼ Min Android ▼ Get it
KeePassDXTop 8Kunzisoft
A KeePass vault on the phone, including TOTP codes Free 27 Sept 2026 Android 4.4+ F-Droid

'Top 8' marks the apps above. Data from F-Droid and hand-checked entries, as of 17 Oct 2026.

Questions

Is a code better than SMS?

Yes. SMS can be stolen. Codes still fail if a fake page asks for the number. Passkeys handle that.

What if I lose the phone?

Export first. If you never exported, the codes are gone.

How we pick the top 8: a person tries the apps and checks each maker's page, then writes the labels down with a date. How we choose