2FA App

[u/adam_mind]

Hi, I'm looking for help choosing a new 2FA app. I've been using andOTP on my mobile device – it's/was a great app. Unfortunately, its development has been discontinued. I'm only looking for apps with FLOSS licenses. Currently, I have a few options: Aegis Authenticator, 2FA Authenticator (2FAS), FreeOTP, and Proton Authenticator. I don't need online synchronization.

Thank You.

[u/martinstoeckli]

Can recommend https://ente.com/auth/ , what I appreciate especially is the (optional) automatic backup, so you are not screwed if the device breaks.

[u/Designer-Text-5936 → u/martinstoeckli]

This one,

[u/alldreadme → u/Designer-Text-5936]

Yeah, this is what i use as well. Has a client for every platform and a web client as well. But if you want a more established company you can use Proton Authenticator.

[u/kmflame → u/martinstoeckli]

I would like to use it but I need to figure out how to get everything from authy without going one by one, I have more than 100 2FA apps !!

[u/ddddavidee → u/kmflame]

https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d958c93

From here https://www.reddit.com/r/Bitwarden/comments/116kpvf/export_authy_totp_to_enter_in_another_app/

[u/kmflame → u/ddddavidee]

Yeah it doesn't work since there is no authy desktop anymore :(

[u/ddddavidee → u/kmflame]

Oh bummer !  I did it like that some time ago.

Is it impossible to find a copy of authy desktop?

[u/kmflame → u/ddddavidee]

I have been trying too without luck

[u/Objective-Pizza2180 → u/martinstoeckli]

I use ms authenticator, it does backup restore from ms account . Ms is requirement from work

[u/martinstoeckli → u/Objective-Pizza2180]

That's an option too, just make sure you don't protect the MS account with the same 2FA. It is one reason why I prefer an independend app.

[u/Other-Frame-7704]

FOSS Aegis

[u/bigpaulo → u/Other-Frame-7704]

been using Aegis for years without a hiccup

[u/Wild-Mistake-7104 → u/Other-Frame-7704]

Use it for years!

[u/AnToMegA424 → u/Other-Frame-7704]

I came here to recommend it

It's so good

[u/Additional_Staff259]

Ente Auth the GOAT.

[u/Serbj90]

I use Stratum, especially becuse of the existing WearOS App. https://stratumauth.com/

Back in the days I used Aegis, it was also fine.

[u/Academic_Wolverine22]

The devs of Aegis really do a great job

https://github.com/beemdevelopment/Aegis

[u/Shivangt10]

I use two. Aegis and Ente auth.  Both are working great for me. 

[u/Independent_Net_8525]

Ente Auth

[u/Easy-Race6938]

Aegis has an andOTP importer, which could make moving your existing tokens over a lot less tedious.

[u/MrNobody_RS]

Ente for sure

[u/neko]

If you already keep passwords in keepass, keepassdx can generate 2fa codes if you save the otp link to it

[u/alexwbaule]

Of the ones you listed I'd go with Aegis. It's GPL, works fully offline, supports an encrypted vault with password or biometric unlock, and as far as I remember it can import andOTP backups directly, so migration should be easy. Export an encrypted backup from andOTP first and keep a copy somewhere other than the phone. FreeOTP is fine for basics but has fewer features. I haven't used Proton Authenticator enough to compare it.

[u/fernandohg]

Using Ente here

[u/i2apier]

2FAS, Ente, Aegis

[u/356BC]

2FAS is great. It has a nice Auto fill extension to use on desktop browsers

[u/jacktherippah123]

Ente is excellent. I use it on macOS and Android. Otherwise Aegis is fine.

[u/mezz0x]

If you're using KeePass as a password manager, it has 2FA support built in. No need for a second app

[u/GammyStudios]

Test restoring your backup before retiring andOTP. Keep an encrypted copy off the phone.

[u/Melodic-Drawer-2100]

Same boat as you a while back — moved off andOTP and landed on Aegis and never looked back. Fully offline, FOSS, and it has a direct andOTP importer so the migration takes like two minutes. The encrypted backups are great too, I keep one on a USB stick just in case. Ente Auth is worth a look if you ever want optional encrypted sync later, but for pure offline Aegis is the answer imo.

[u/singoulo]

I give you one more choice, Stratum. Some say its better than Aegis visually. One thing that clearly better than Aegis, Stratum support Wear OS.

I personally use Aegis. Fully offline, zero internet permission. Fully customisable (if you want). I tried Ente, Proton and 2Fas but I don't like it. I haven't try Freeotp yet.