

FreeOTP
FreeOTP is a two-factor authentication application for systems utilizing one-time password protocols with support for Android (6 or later) and iOS (11 or later). Tokens can be added easily by scanning a QR-code or by manually entering in the token configuration.
Features
Properties
- Privacy focused
Features
- Two-factor Authentication
- Community-based
- Multiple Account support
- Time-based One-time Password
- Ad-free
- Works Offline
- Dark Mode
Tags
- rfc4226
- Authentication
- rfc6238
- hotp
- open-source-projects
FreeOTP News & Activities
Recent News
Recent activities
- lfern added FreeOTP as alternative to Personal 2FA
- kewmudawog reviewed FreeOTP
A nightmare when you need to either import backups or transfer to another app. See https://gist.github.com/jleclanche/a1dd8d88b8e41718e42ac1be52ac7829
- Maoholguin added FreeOTP as alternative to Proton Authenticator
- kelsonv reviewed FreeOTP
Bare-bones, doesn't get in your way, free, open source and stable. Downside: no groups (this is part of why I went with Aegis), and try as I might I just could not find a way to import more than one account at a time, or from another app on the same device. (That's the other part of why I went with Aegis.)
dlfinch added FreeOTP as alternative to Allthenticator- michaelschmid updated FreeOTP
- michaelschmid liked FreeOTP
Featured in Lists
For many the Internet is Google: Search, mail, videos, web browser, cloud services, mobile OS, etc. – Google is the …
A list of interesting and open source [Android](/software/android/) apps.
Privacy-enhancing software I trust / recommend. Browsers and their extensions, email providers, VPN services, …
What is FreeOTP?
FreeOTP is a two-factor authentication application for systems utilizing one-time password protocols with support for Android (6 or later) and iOS (11 or later). Tokens can be added easily by scanning a QR-code or by manually entering in the token configuration.
FreeOTP implements open standards. This means that no proprietary server-side component is necessary: use any server-side component that implements these standards. We personally recommend FreeIPA, which uses TOTP. However, any standards-compliant implementation will work. Currently, FreeOTP provides implementations of HOTP and TOTP.












Comments and Reviews
Pro: open-source, large github following, free, minimal, reliable, encrypted file export, imports, android automatic backup, available on both iOS and Android.
Con: no 2fa itself (like email/phone), can't change password.
It's simple to use, but it's not possible to backup the secrets. This is very important because if you don't have a backup you have to manualy reset the 2FA for every service. Android users should use andOTP instead.
It allows you to backup through Android automatic backup or through an encrypted file.
A nightmare when you need to either import backups or transfer to another app. See https://gist.github.com/jleclanche/a1dd8d88b8e41718e42ac1be52ac7829
Bare-bones, doesn't get in your way, free, open source and stable. Downside: no groups (this is part of why I went with Aegis), and try as I might I just could not find a way to import more than one account at a time, or from another app on the same device. (That's the other part of why I went with Aegis.)
Just got a new Android and there's no way for me to get the OTPs from my iPhone to my new phone. What a pain.
It allows exports of many services. Some, like Authy, don't allow exports so you can't export anywhere.
Would be great if the app was a bit prettier and could be backed up.
OK, Great. Let it be better alternative to Authy than everything else. But the real reasons why do I using Authy are "syncing" and "windows". The last one is the same reason I am looking for alternative. Unfortunately there are no native version for linux, only as chrome app. Why dont you guys making software for PC? It looks like nowadays everyone just forget about existence of such platforms like linux or windows...
In fact, TOTP is safest when only used on a separate physical device where your passwords are. So if you store your login passwords on your PC, then the TOTP keys should be on your phone. This is the point of 2 factor authentication: if your passwords/PC is hacked, the attacker won't get into your account without the TOTP keys. If your phone is stolen, the attacker will have TOTP keys but no login passwords.
hmm. I have never thought about it in such way.. Thank you :)
Also, Authy killed its desktop app, and was recently hacked.