# Bitwarden Authenticator privacy rating

Free, open source authenticator app for iOS and Android from Bitwarden that generates TOTP codes. It works without an account and can optionally sync codes with a Bitwarden password manager vault.

## Summary

Bitwarden Authenticator scores 70 out of 100 (grade C) on the two-factor authentication criteria. It meets 3 of 4 criteria: open source, no ads or data sales and independent audit. It does not meet no trackers or telemetry. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://bitwarden.com/products/authenticator
- Source code: https://github.com/bitwarden/ios
- License: GPL-3.0
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: Google Tag Manager
- Category: [Two-factor authentication](https://privacyratings.com/two-factor-authentication/)
- Also rated: [Bitwarden](https://privacyratings.com/password-managers/bitwarden/) (Password managers)
- Grade: C (70/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | GPL-3.0. | https://github.com/bitwarden/ios/blob/main/LICENSE.txt |
| No trackers or telemetry | No | Exodus finds Google Crashlytics in the Android app, and the website loads Google Tag Manager. | https://reports.exodus-privacy.eu.org/en/reports/com.bitwarden.authenticator/latest/ |
| No ads or data sales | Yes | Free app from Bitwarden, which is funded by paid plans. | https://bitwarden.com/pricing/ |
| Independent audit | Yes | Full report from Unit 42 covering the Bitwarden mobile and authenticator apps. | https://bitwarden.com/assets/718YF2IWeVNARWs6nBgYzS/796a7e97eedc6d569773a1892284d034/2025_Mobile_App_Security_Assessment.pdf |

Source: https://privacyratings.com/two-factor-authentication/bitwarden-authenticator/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/two-factor-authentication/bitwarden-authenticator.md