The following is a general comparison of OTP applications that are used to generate one-time passwords for two-factor authentication (2FA) systems using the time-based one-time password (TOTP), the HMAC-based one-time password (HOTP) algorithms or Mobile-OTP (mOTP)[1], which is an older, open source, 2FA system for mobile phones that combines a user’s PIN, time and a per-device secret to generate OTPs. It also lists apps that support proprietary authentication methods, like those used by Steam or Yandex.
Implementation | Description | Online sync. | Operating system / Platform | Default | Non-default | Import methods | Export methods | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Windows | Mac | Linux | iOS | Android | Other | HOTP | Value length, d | Hash, H | Interval, TX | Epoch, T0 | Other: Steam or mOTP | QR | JSON | QR | JSON | |||
1Password | Cross-platform password manager[2] | Yes | Yes | Yes | Yes | Yes | Yes | No | Unknown | No | Unknown | Unknown | Unknown | Unknown | ||||
2FAS[3] | Popular, feature rich open-source two-factor authenticator. No account required. | Online backup/sync via iCloud or Google Drive | Through browser extension connected to mobile app | Yes | Yes | No | Yes | Yes | Yes | Yes | No | No | Yes | Yes | No | Yes | ||
2FAuth[4] | An open-source PHP web based self-hosted OTP generator, designed for both mobile and desktop. | Yes, web based | No | Unknown | Yes | Yes | Yes | No | Steam | |||||||||
2fast[5] | Open-source two-factor authenticator. No account required. Available in Windows App Store. | No | Yes | No | No | No | No | No | Unknown | Unknown | Unknown | Unknown | Unknown | Unknown | ||||
Aegis Authenticator | Free and open source app for Android to manage your 2-step verification tokens.[6] | Automatic backup to a location of your choosing | No | No | No | No | Yes | No | Unknown | Yes | Yes | Yes | No | Steam | Yes | Yes | Yes | Yes |
andOTP[7] (unmaintained - json file handled by Aegis)[8] | Open-source app for Android 4.4+. Compatible with Google Authenticator. | No | No | No | No | No | Yes | No | Unknown | No | No | Yes | No | No | Yes | Yes | ||
Apple Keychain | Native password manager on Apple devices. Not on tvOS.[9] | Yes [10] | Yes [11] | Yes | No | Yes | No | Apple Vision Pro | Unknown | Yes | Yes | Yes | Unknown | Unknown | Yes | The Setup URL (otpauth://) can be manually copied for each item from the edit screen of the Passwords app | ||
Authenticator[12] | GNOME circle application. Free and Open Source, community-provided, but not shipped as part of GNOME's Core apps | No | No | No | Yes | No | No | Any desktop or mobile platform where GNOME can run | Yes | Yes | Yes | Yes | Yes | Steam | Yes | Yes | Yes | Yes |
Authenticator App by 2Stable[13] | Secure two-factor authentication app for iPhone, iPad, iPod, Apple Watch and Mac. Freemium app with max 2 accounts in the free version.[14] | Yes | No | Yes | No | Yes | No | No | Unknown | Yes | Yes | Yes | Unknown | No | ||||
Authy | By Twilio, from 2015, originally Authy.[15] Previously available for Chrome.[16] | Yes | Discontinued March 19, 2024[17] | Yes | Yes | No | Unknown | Yes | No | No | No | No | ||||||
Bitwarden | Open Source Cross platform password manager. 2FA is a premium feature.[18] | Yes | Yes | Yes | Yes | Yes | Yes | No | Unknown | Yes | Yes | Yes | Unknown | Steam[19] | Yes | Yes | No | Yes |
Bitwarden Authenticator | Free and open source app for Android and iOS to manage your 2-step verification tokens.[20] | No | No | No | No | Yes | Yes | No | Unknown | No | No | No | No | No | ||||
Duo Mobile[21] | Free 2FA authenticator provided by Cisco | Yes, through iCloud or Google Drive | No | No | No | Yes | Yes | No | Unknown | Unknown | Unknown | Unknown | Unknown | No | ||||
Enpass[22] | Password manager by Sinew Software Systems. Syncs over multiple back-ends. | Yes | Yes | Yes | Yes | Yes | Yes | No | Unknown | Yes | No | Yes | Unknown | No | Yes | |||
Ente Auth | Free, open source, cross-platform authenticatior with encrypted cloud sync.[23] | Yes | Yes | Yes | Yes | Yes | Yes | Web | Unknown | Unknown | Unknown | Unknown | Unknown | Steam [24] | ||||
FreeOTP[25] | Maintained by RedHat, and based on Google Authenticator. | No | No | No | No | Yes | Yes | No | Unknown | Yes | Yes | Yes | No | No | ||||
GAuth Authenticator[26] | A simple application for multi-factor authentication, written in HTML using jQuery Mobile (and PhoneGap), jsSHA and LocalStorage. | Unknown | Yes | Yes | Yes | No | No | No | Unknown | Unknown | Unknown | Unknown | Unknown | Unknown | ||||
Google Authenticator | Yes | No | No | No | Yes | Yes | No | Yes | No | No | No | No | No | Yes | No | Yes | No | |
Hotpants[27] | Free, open-source J2ME MIDlet app to manage your TOTPs and HOTPs. | Import via scanning QR code on screen | No | No | No | No | No | J2ME | Yes | Unknown | Unknown | Unknown | Unknown | No | ||||
IBM Security Verify | Unknown | No | No | No | Yes | Yes | No | Unknown | Unknown | Unknown | Yes | Unknown | Unknown | |||||
Invantive Authenticator[28] | Focuses on integration with Invantive Keychain. | No | Yes | No | No | No | No | No | Unknown | Yes | Yes | Yes | Yes | No | ||||
KeePassXC[29] | Password manager | Through user setup with Syncthing,[30] or only within the KeeWeb[31] online web App[32] | Yes | Yes | Yes | No | KeePassDX[33] | No | Unknown | Yes | Yes | Yes | No | Steam | Yes | |||
LastPass Authenticator[34] | Cross-platform OTP for mobile devices with support for online backup. | Yes | No | No | No | Yes | Yes | No | Unknown | Yes | Yes | Yes | No | No | Yes | |||
Microsoft Authenticator | Yes | No | No | No | Yes | Yes | No | No | No | No | No | No | No | No | No | No | No | |
oathtool [35]
|
Command-line tool for generating OTP tokens. | No | No | No | Yes | No | No | FreeBSD,[36] NetBSD,[37] OpenBSD[38] | Unknown | Yes | Yes | Yes | Yes | Unknown | ||||
Open Authenticator[39] | Free, open-source and multiplatform app to manage your TOTPs. | Yes, requires a subscription for more than 6 TOTPs | Yes | Yes | No | Yes | Yes | No | No | Yes | Yes | Yes | No | No | ||||
privacyIDEA Authenticator[40] | For use with privacyIDEA Authentication Server, with a secure enrollment process. | No | No | No | No | Yes | Yes | No | No | Yes | Yes | Yes | No | Unknown | ||||
Proton Authenticator[41] | Open source and available on every device. Securely sync and backup 2FA codes easily. No account required. | Yes, via a Proton Account, or via iCloud on Apple devices | Yes | Yes | Yes | Yes | Yes | No | No | Yes | Yes | Yes | No | Steam | No | Yes | No | Yes |
SAASPASS Authenticator [42] | Cross-platform 2FA Authenticator with TOTP & HOTP generator with sharing capabilities and password manager integration. Multiple device support, Mobile app and web access with multiple backup capabilities. | Yes | Yes | Yes | Yes | Yes | Yes | No | No | Yes | Yes | Yes | Yes | Steam | ||||
Stratum[43] | Free and open-source two-factor authentication app for Android | Unknown | No | No | No | No | Yes | WearOS | Yes | Unknown | Unknown | Unknown | Unknown | Steam & mOTP | ||||
Symantec VIP | Unknown | No | No | No | Yes | Yes | No | Unknown | Unknown | Unknown | Unknown | Unknown | Unknown | |||||
Tessera[44] | Free, open-source Qt for Symbian and desktop app to manage your TOTPs. | Unknown | Initial support for desktop | No | Could be ported | Symbian S60 5th Edition | Unknown | Unknown | Unknown | Unknown | Unknown | Unknown | ||||||
TOTP ME[45] | Free, open-source J2ME MIDlet app to manage your TOTPs. | Manually | Using MicroEmulator app[46] | Unknown | Using J2ME Loader app[47] | J2ME or any with J2ME support or emulator | Unknown | Yes | Yes | Yes | Time correction in seconds | No | ||||||
TOTP.APP[48] | Web-based authenticator not requiring registration. | No | Yes | Yes | Yes | Yes | Yes | No | No | No | No | No | No | No | ||||
Yandex Key[49] | Simple app for phones from Russian company | Yes, manually, for 1 year | No | No | No | Yes | Yes | No | No | Unknown | Unknown | Unknown | Unknown | Unknown | ||||
Yubico Authenticator for Desktop[50] | By Yubico, for use with Yubikeys. | No | Yes | Yes | Yes | — | — | No | No | Yes | Yes | Yes | No | No | ||||
Yubico Authenticator for Mobile | — | — | — | Yes | Yes |