Open-source Microsoft Authenticator alternatives

Aegis Authenticator is an open-source two-factor authentication app for Android. It generates one-time codes for online accounts and was created to offer features missing from other authenticator apps, notably proper encryption of the token store and reliable backups.

It supports the HOTP and TOTP algorithms, so it works with thousands of services and is compatible with Google Authenticator. The vault is encrypted with AES-256-GCM and can be unlocked with a password protected by scrypt or with biometrics through the Android Keystore. Extra protections include screen capture prevention and tap-to-reveal codes. Entries can be added by scanning a QR code, from an image or manually, and imported from apps such as Authy, andOTP, FreeOTP and Google Authenticator.

Aegis is written in Java and released under GPL-3.0. Entries can be organized with groups, custom icons and search, and the interface offers Light, Dark and AMOLED themes. Vaults can be exported in plaintext or encrypted form and backed up automatically. The app is distributed through Google Play and F-Droid, and the documentation describes its security design.

2FAuth is a self-hosted web application for managing two-factor authentication accounts and generating their security codes. It serves as a web-based alternative to one-time passcode apps such as Google Authenticator and is designed to work on both mobile and desktop screens.

Accounts can be organized into groups, added by scanning and decoding a QR code or by filling in an advanced form, and edited later, including imported ones. It generates TOTP, HOTP and Steam Guard codes. The author built it to avoid interfaces that show every code at once with stressful countdowns, to keep 2FA accounts in a standalone database that is easy to back up and restore, and to avoid reaching for a phone when working on a desktop.

Access requires a user account, and since version 4.0 multiple users are possible, with public registration, registration limited by email domain, SSO-only registration or no registration at all. 2FAuth is written in PHP, licensed under AGPL-3.0, localized in English and French, and offers a public demo.

This repository holds the official Android app for the Open Source 2FAS project, a two-factor authentication service. Two-factor authentication adds a second step to sign-in, such as a one-time password shown on your phone, so that a stolen password alone is not enough to access an account. The app is written in Kotlin and licensed under GPL-3.0.

The app supports time-based one-time passwords and HMAC-based one-time passwords, which means it works with any service that follows those standards, including Google, Microsoft and Dropbox. The README describes it as easy to set up and use. Installation is from the releases page, followed by on-screen instructions to add your online accounts.

The project handles bug reports through GitHub issues and asks for security reports to go to a dedicated email address instead. Contributions are welcome through a contribution guide, and donations support ongoing development. The README notes that the app's graphics are not part of the open-source project and carry their own licensing terms.