Private and open-source alternatives to Google Authenticator
15 two-factor authentication rated against the same public privacy criteria as Google Authenticator, with our picks first.
Why look for an alternative?
- Open source: no. Closed source. The old open source version on GitHub is no longer maintained.
- No trackers or telemetry: no. Exodus finds no third-party trackers, but the Play data safety listing declares required collection of app interactions, crash logs and device IDs for analytics.
- Independent audit: no. No independent audit is published.
See the full Google Authenticator rating.
The alternatives
Aegis Grade B
Free and open source authenticator app for Android that stores codes in an encrypted local vault. It supports encrypted backups, imports from many other authenticator apps and has no internet permission.
Aegis scores 80 out of 100 (grade B) on the two-factor authentication criteria. It meets 3 of 4 criteria: open source, no trackers or telemetry and no ads or data sales.
Authenticator Grade B
Open source two-factor authentication app for iOS that stores secrets encrypted in the iOS keychain. The app never connects to the internet.
Authenticator scores 80 out of 100 (grade B) on the two-factor authentication criteria. It meets 3 of 4 criteria: open source, no trackers or telemetry and no ads or data sales.
Authenticator CC Grade B
Open source browser extension for Chrome, Firefox and Edge that generates TOTP and HOTP codes. Accounts can be encrypted with a password and backed up to a file or the user's cloud storage.
Authenticator CC scores 80 out of 100 (grade B) on the two-factor authentication criteria. It meets 3 of 4 criteria: open source, no trackers or telemetry and no ads or data sales.
Authenticator GNOME Grade B
Open source two-factor code generator for the GNOME desktop, written in Rust. It supports TOTP, HOTP and Steam codes, a GNOME Shell search provider and backups to and from other authenticator apps.
Authenticator GNOME scores 80 out of 100 (grade B) on the two-factor authentication criteria. It meets 3 of 4 criteria: open source, no trackers or telemetry and no ads or data sales.
Chronos Authenticator Grade B
Open source two-factor authentication app for iOS that supports TOTP and HOTP codes. Tokens are encrypted on the device, with optional encrypted iCloud sync and exports.
Chronos Authenticator scores 80 out of 100 (grade B) on the two-factor authentication criteria. It meets 3 of 4 criteria: open source, no trackers or telemetry and no ads or data sales.
FreeOTP Grade B
Open source two-factor authentication app sponsored by Red Hat that generates HOTP and TOTP codes. Tokens are added by scanning a QR code.
FreeOTP scores 80 out of 100 (grade B) on the two-factor authentication criteria. It meets 3 of 4 criteria: open source, no trackers or telemetry and no ads or data sales.
FreeOTP+ Grade B
Open source fork of FreeOTP for Android that adds backup export and import, search, categories, biometric lock and offline token icons. Generates HOTP and TOTP codes.
FreeOTP+ scores 80 out of 100 (grade B) on the two-factor authentication criteria. It meets 3 of 4 criteria: open source, no trackers or telemetry and no ads or data sales.
Stratum Grade B
Free and open source two-factor authentication app for Android with encrypted backups, icon packs, categories and a Wear OS companion app. It imports from many other authenticator apps.
Stratum scores 80 out of 100 (grade B) on the two-factor authentication criteria. It meets 3 of 4 criteria: open source, no trackers or telemetry and no ads or data sales.
Bitwarden Authenticator Grade C
Free, open source authenticator app for iOS and Android from Bitwarden that generates TOTP codes. It works without an account and can optionally sync codes with a Bitwarden password manager vault.
Based in the United States (Five Eyes). Bitwarden Authenticator scores 70 out of 100 (grade C) on the two-factor authentication criteria. It meets 3 of 4 criteria: open source, no ads or data sales and independent audit.
Ente Auth Grade C
Free, open source TOTP authenticator for mobile, desktop and web. Works fully offline, or with an Ente account to sync codes across devices with end-to-end encrypted backups.
Based in the United States (Five Eyes). Ente Auth scores 70 out of 100 (grade C) on the two-factor authentication criteria. It meets 3 of 4 criteria: open source, no ads or data sales and independent audit.
Proton Authenticator Grade C
Free, open source authenticator app from Proton for Android, iOS, macOS, Windows and Linux. It works without an account, and signing in with a Proton account adds end-to-end encrypted sync.
Based in Switzerland. Proton Authenticator scores 65 out of 100 (grade C) on the two-factor authentication criteria. It meets 2 of 4 criteria: open source and no ads or data sales.
2FAS Grade D
Open source authenticator app for Android and iOS with a browser extension for filling codes. Backups can be encrypted and synced through the user's Google Drive or iCloud without a 2FAS account.
Based in the United States (Five Eyes). 2FAS scores 50 out of 100 (grade D) on the two-factor authentication criteria. It meets 2 of 4 criteria: open source and no ads or data sales.
OTP Auth Grade D
Two-factor authentication app for iPhone, iPad, Apple Watch and Mac that generates one-time codes, with optional iCloud sync and encrypted backups.
Based in Germany (Fourteen Eyes). OTP Auth scores 50 out of 100 (grade D) on the two-factor authentication criteria. It meets 2 of 4 criteria: no trackers or telemetry and no ads or data sales.
Tofu Grade D
Open source two-factor authentication app for iOS that generates TOTP and HOTP codes. It works without a network connection.
Tofu scores 50 out of 100 (grade D) on the two-factor authentication criteria. It meets 2 of 4 criteria: open source and no ads or data sales.
Yubico Authenticator Grade D
Authenticator app from Yubico that stores OATH one-time password secrets on a YubiKey instead of the phone or computer, and generates codes when the key is connected or tapped.
Based in Sweden (Fourteen Eyes). Yubico Authenticator scores 50 out of 100 (grade D) on the two-factor authentication criteria. It meets 2 of 4 criteria: open source and no ads or data sales.