Comparison of OTP applications

The following is a general comparison of OTP applications that are used to generate one-time passwords for two-factor authentication (2FA) systems using the time-based one-time password (TOTP) or the HMAC-based one-time password (HOTP) algorithms.

Authenticated implementations

Implementation Description Online sync. Operating system / Platform Non-default
Windows Mac Linux iOS Android J2ME Other Value length, d Hash, H Interval, TX Epoch, T0 Steam
Aegis Authenticator Free and open source app for Android to manage your 2-step verification tokens.[1] Automatic backup to a location of your choosing No No No No Yes No No Yes Yes Yes No Yes
Apple Keychain Native password manager on Apple devices. Not on tvOS.[2] Yes [3] Yes [4] Yes No Yes No No Apple Vision Pro Yes Yes Yes Un­known Un­known
"Authenticator" GNOME circle application. Free and Open Source, community-provided, but not shipped as part of GNOME's Core apps. No No No Yes No No No Any desktop or mobile platform where GNOME can run Yes Yes Yes Yes Un­known
Bitwarden Open Source Cross platform password manager. 2FA is a premium feature.[5] Yes Yes Yes Yes Yes Yes No No Yes Yes Yes Un­known Yes[6]
Bitwarden Authenticator Free and open source app for Android and iOS to manage your 2-step verification tokens.[7] No No No No Yes Yes No No No No No No No
Ente Auth Free, open source, cross-platform authenticatior with encrypted cloud sync.[8] Yes Yes Yes Yes Yes Yes No Web Un­known Un­known Un­known Un­known Yes [9]
SAASPASS Authenticator [10] Cross-platform 2FA Authenticator with TOTP & HOTP generator with sharing capabilities and password manager integration. Multiple device support, Mobile app and web access with multiple backup capabilities. Yes Yes Yes Yes Yes Yes No No Yes Yes Yes Yes Yes
Google Authenticator Yes No No No Yes Yes No No No No No No No
Yandex Key[11] Simple app for phones from Russian company Yes, manually, for 1 year No No No Yes Yes No No Un­known Un­known Un­known Un­known Un­known
IBM Security Verify Un­known No No No Yes Yes No No Un­known Un­known Yes Un­known Un­known
Microsoft Authenticator Yes No No No Yes Yes No No No No No No No
1Password Cross-platform password manager[12] Yes Yes Yes Yes Yes Yes No No No Un­known Un­known Un­known Un­known
Authy By Twilio, from 2015, originally Authy.[13] Previously available for Chrome.[14] Yes Discontinued March 19, 2024[15] Yes Yes No No Yes No No No No
Enpass[16] Password manager by Sinew Software Systems. Syncs over multiple back-ends. Yes Yes Yes Yes Yes Yes No No Yes No Yes Un­known No
FreeOTP[17] Maintained by RedHat, and based on Google Authenticator. No No No No Yes Yes No No Yes Yes Yes No No
oathtool[18] Command-line tool for generating OTP tokens. No No No Yes No No No FreeBSD[19], NetBSD[20], OpenBSD[21] Yes Yes Yes Yes Un­known
privacyIDEA Authenticator[22] For use with privacyIDEA Authentication Server, with a secure enrollment process. No No No No Yes Yes No No Yes Yes Yes No Un­known
andOTP[23] (unmaintained)[24] Open-source app for Android 4.4+. Compatible with Google Authenticator. No No No No No Yes No No No No Yes No No
Invantive Authenticator[25] Focuses on integration with Invantive Keychain. No Yes No No No No No No Yes Yes Yes Yes No
LastPass Authenticator[26] Cross-platform OTP for mobile devices with support for online backup. Yes No No No Yes Yes No No Yes Yes Yes No No
Symantec VIP Un­known No No No Yes Yes No Un­known Un­known Un­known Un­known Un­known Un­known
TOTP.APP[27] Web-based authenticator not requiring registration. No Yes Yes Yes Yes Yes No No No No No No No
Yubico Authenticator for Desktop[28] By Yubico, for use with Yubikeys. No Yes Yes Yes — — No No Yes Yes Yes No No
Yubico Authenticator for Mobile — — — Yes Yes
KeePassXC[29] Password manager Through user setup with Syncthing,[30] or only within the KeeWeb[31] online web App[32] Yes Yes Yes No KeePassDX[33] No No Yes Yes Yes No Yes
2FAS[34] Popular, feature rich open-source two-factor authenticator. No account required. Online backup/sync via iCloud or Google Drive Through browser extension connected to mobile app Yes Yes No No Yes Yes Yes No No
2fast[35] Open-source two-factor authenticator. No account required. Available in Windows App Store. No Yes No No No No No No Un­known Un­known Un­known Un­known Un­known
2FAuth[36] An open-source PHP web based self-hosted OTP generator, designed for both mobile and desktop. Yes, web based No No Yes Yes Yes No Yes
totp-cli[37] Popular, feature rich open-source two-factor authenticator. No account required. Manually No Yes Yes No No No No Un­known Un­known Un­known Un­known Un­known
Open Authenticator[38] Free, open-source and multiplatform app to manage your TOTPs. Yes, requires a subscription for more than 6 TOTPs Yes Yes No Yes Yes No No Yes Yes Yes No No
TOTP ME[39] Free, open-source J2ME MIDlet app to manage your TOTPs. Manually Using MicroEmulator app[40] Un­known Using J2ME Loader app[41] Yes Any with J2ME support or emulator Yes Yes Yes Time correction in seconds No
Hotpants[42] Free, open-source J2ME MIDlet app to manage your TOTPs and HOTPs. Import via scanning QR code on screen No No No No No Yes No Un­known Un­known Un­known Un­known No
Tessera[43] Free, open-source Qt for Symbian and desktop app to manage your TOTPs. Un­known Initial support for desktop No Could be ported No Symbian S60 5th Edition Un­known Un­known Un­known Un­known Un­known
GAuth Authenticator[44] A simple application for multi-factor authentication, written in HTML using jQuery Mobile (and PhoneGap), jsSHA and LocalStorage. Un­known Yes Yes Yes No No No No Un­known Un­known Un­known Un­known Un­known
Authenticator App

by 2Stable[45]

Secure two-factor authentication app for iPhone, iPad, iPod, Apple Watch and Mac. Yes No Yes No Yes No No No Yes Yes Yes Un­known No

See also

References

  1. ^ "Aegis Authenticator - Secure 2FA app for Android". Aegis Authenticator. Retrieved 29 April 2023.
  2. ^ "Sending passwords to other users or Apple devices". Apple Support. 18 February 2021. Retrieved 23 August 2024.
  3. ^ "Set up iCloud Keychain". Apple Support. 5 August 2024. Archived from the original on 6 August 2024. Retrieved 23 August 2024.
  4. ^ "Set up iCloud Passwords on your Windows computer — in: iCloud for Windows User Guide". Apple Support. Retrieved 23 August 2024.
  5. ^ "Pricing for Individuals and Families | Bitwarden". Bitwarden. Retrieved 23 March 2023.
  6. ^ "Steam Guard TOTPs". Bitwarden. Retrieved 23 March 2023.
  7. ^ "Bitwarden just launched a new authenticator app. Here's what it means to users. | Bitwarden Blog". Bitwarden.
  8. ^ "Ente Auth - Open source 2FA authenticator, with E2EE backups". Ente. Retrieved 16 October 2024.
  9. ^ "Migrating from Steam Authenticator". Ente. Retrieved 16 October 2024.
  10. ^ "The 5 Best Two-Factor Authentication Apps for iPhone & Android". Gadget Hacks. 28 February 2020. Retrieved 28 February 2020.
  11. ^ "Yandex Key - Yandex ID. Help". yandex.com. Retrieved 28 May 2024.
  12. ^ "Use 1Password as an authenticator for sites with two-factor authentication". 1Password. Retrieved 7 September 2018.
  13. ^ Lardinois, Frederic (24 February 2015). "Twilio Acquires Two-Factor Authentication Service Authy". TechCrunch. Retrieved 5 March 2018.
  14. ^ "Authy for Chrome App & Extension End of Life". Authy Support. Retrieved 14 February 2024.
  15. ^ "Business customer guide: End of Life (EOL) for use of Authy API with Twilio Authy Desktop apps". Authy Support. Retrieved 14 February 2024.
  16. ^ "Best password manager for iOS, Android, Windows, Linux, Mac | Enpass". www.enpass.io. Retrieved 7 September 2018.
  17. ^ "FreeOTP". freeotp.github.io.
  18. ^ "OATH Toolkit". www.nongnu.org. Retrieved 7 September 2018.
  19. ^ "FreshPorts -- security/oath-toolkit: Library, tools, and PAM module for OATH authentication". FreeBSD_Ports.
  20. ^ "security/oath-toolkit - The NetBSD Packages Collection".
  21. ^ "ports/security/oath-toolkit/".
  22. ^ "privacyIDEA Authenticator". GitHub. Retrieved 7 September 2018.
  23. ^ "andOTP/andOTP". GitHub.
  24. ^ flocke (15 July 2017). "[Unmaintained][App][4.4+][Open source] andOTP - Open source two-factor authentication for Android". XDA Forums. Retrieved 12 March 2023.
  25. ^ B.V., Invantive Software. "Invantive Authenticator". two-step-verification.solutions. Retrieved 7 September 2018.
  26. ^ "LastPass - LastPass Authenticator". lastpass.com. Retrieved 7 September 2018.
  27. ^ "Online one-time password generator / TOTP (Google Authenticator) Online". totp.app. Retrieved 7 September 2018.
  28. ^ "Using Your YubiKey with Authenticator Codes : Yubico Support". support.yubico.com. Archived from the original on 2 October 2018. Retrieved 11 March 2023.
  29. ^ Team, KeePassXC. "KeePassXC 2.2.0 released - KeePassXC". keepassxc.org.
  30. ^ "KeePassXC + KeePassDX (Android) Sync guide. A complete starting guide for new users". reddit.com. 10 September 2021. Retrieved 7 July 2023.
  31. ^ "Free Password Manager Compatible with KeePass: KeeWeb". keeweb.info. Retrieved 7 July 2023.
  32. ^ "KeeWeb". keeweb.info. Retrieved 7 July 2023.
  33. ^ "KeePassDX". keepassdx.com. Retrieved 7 July 2023.
  34. ^ "2FA Authenticator App (2FAS)". 2FAS. Retrieved 12 March 2023.
  35. ^ "2fast Authenticator App (2fast)". 2fast-team. Retrieved 14 November 2024.
  36. ^ "GitHub - Bubka/2FAuth: A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes". GitHub. Bubka. Retrieved 19 March 2023.
  37. ^ "Authy/Google Authenticator like TOTP CLI tool written in Go". GitHub. Retrieved 28 May 2024.
  38. ^ "Open Authenticator : Secure your online accounts with a free, open-source and lovely-crafted app". Skyost. Retrieved 22 July 2024.
  39. ^ Cacek, Josef (14 April 2024), kwart/totp-me, retrieved 12 August 2024
  40. ^ "totp-me - TOTP for Java ME - Google authenticator". SourceForge.
  41. ^ Shakarun, Nikita, nikita36078/J2ME-Loader
  42. ^ Matti (4 August 2024), baumschubser/hotpants, retrieved 12 August 2024
  43. ^ Janiszewski, Maciej (10 April 2024), ksiazkowicz/Tessera, retrieved 12 August 2024
  44. ^ Gerard Braad. "gauth.apps.gbraad.nl". Retrieved 16 September 2024.
  45. ^ "Authenticator App by 2Stable". Retrieved 6 November 2024.