Privacy Ratings

Two-factor authentication

2FAS privacy rating

Open source authenticator app for Android and iOS with a browser extension for filling codes. Backups can be encrypted and synced through the user's Google Drive or iCloud without a 2FAS account.

United States Five EyesLicense: GPL-3.0

Summary

2FAS scores 50 out of 100 (grade D) on the two-factor authentication criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It does not meet no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

Score 50 out of 100. How scoring works

Criteria

  • Yes

    Open source Weight 3 of 3

    Is all the source code needed to run the product public?

    GPL-3.0.

    github.com

  • No

    No trackers or telemetry Weight 3 of 3

    Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?

    Exodus finds Google Crashlytics in the Android app, and the privacy policy says Google Analytics is used.

    reports.exodus-privacy.eu.org

  • Yes

    No ads or data sales Weight 2 of 3

    Is the product funded without advertising, ad targeting or selling user data?

    The apps are free and donation-supported, and the privacy policy says personal information is never sold.

    2fas.com

  • No

    Independent audit Weight 2 of 3

    Has an independent security or privacy audit been published within the last three years?

    No independent audit is published.

Other two-factor authentication

All 18 two-factor authentication