# Tofu privacy rating

Open source two-factor authentication app for iOS that generates TOTP and HOTP codes. It works without a network connection.

## Summary

Tofu scores 50 out of 100 (grade D) on the two-factor authentication criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It does not meet no trackers or telemetry and independent audit.

- Website: https://www.tofuauth.com
- Source code: https://github.com/iKenndac/Tofu
- License: ISC
- Home page trackers: none found
- Category: [Two-factor authentication](https://privacyratings.com/two-factor-authentication/)
- Grade: D (50/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | ISC. | https://github.com/iKenndac/Tofu/blob/master/LICENSE |
| No trackers or telemetry | No | The app needs no network connection, but the website loads an analytics script from okayanalytics.com, a third-party domain now held by a domain reseller. | https://www.tofuauth.com/ |
| No ads or data sales | Yes | Free app with no ads or paid tiers. | https://github.com/iKenndac/Tofu#installation |
| Independent audit | No | No independent audit is published. |  |

Source: https://privacyratings.com/two-factor-authentication/tofu/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/two-factor-authentication/tofu.md