FreeOTP Authenticator

Red Hat

About this app

FreeOTP adds a second layer of security for your online accounts. This works by generating one-time passwords on your mobile devices which can be used in conjunction with your normal password to make your login nearly impossible to hack. These passwords can be generated even when your phone is in airplane mode.

FreeOTP works with many of the great online services you already use, including Google, Facebook, Evernote, GitHub and many more! FreeOTP also may work for your private corporate security if they implement the standardized TOTP or HOTP protocols. This includes great enterprise solutions like FreeIPA.

FreeOTP is open source and free software! Licensed under the Apache 2.0 license, you can obtain the source code for FreeOTP at https://fedorahosted.org/freeotp for review or modification. Contributions are welcome!

Ratings and reviews

Good app but it has issues with exporting the shared secret keys. This seems to have been fixed in newer versions but anyone who installed version 1 and got auto updated to version 2.0.1 won't ever have a password set but the exported file is encrypted and requires a password to be re-imported. Best practice to always save the shared secret key (qr code) separately.

Very handy app. The low rating is due to the inability to migrate to a new device. There are several bugs related to, "I've exported my tokens but can't import them to the new device because it wants a password I don't have." It's not clear if the user ever setup a password in the first place. In short, there needs to be a mechanism to set the password on export. Related, the android "setup a new device from a previous device" feature does NOT copy over the key store so same issue.

Updated review removing one star to reflect this app, having served me well for years, seems to be unmaintained. It still does its job perfectly, but if you're looking for an equivalent free and open source app that works a bit better and it's maintained, you should probably take a look into andOTP. The latter supports blocking access to the codes using the fingerprint reader as well as backing up codes and restoring them.

What’s new

* Overwrite master key in keystore on restore
* Update to Android 14 / API Level 34
* Update dependencies
* Upgrade AGP to 8.5.0, Gradle to 8.7
* Add various translations (Dutch, Chinese, Basque...)
* support Chinese & Chinese Simplicified
* Extremely optimize PNG image assets losslessly
* Use edit icon only as vector drawable
* Update androidx.constraintlayout dependency to 2.1.4
* Remove local JAR from dependencies