AuthWright

Jonathan Dale

About this app

AuthWright makes the sign-in codes that Google, Microsoft, GitHub and most other sites ask for when two-step verification is on. It works with the same QR codes and setup keys as Google Authenticator.

Adding accounts
• Scan a setup QR code, choose a screenshot, paste a link or setup key, or type the key in.
• Moving from Google Authenticator? Export your accounts there and scan the codes it shows.
• Import an export from Aegis, 2FAS, Bitwarden, andOTP, FreeOTP+, Ente or Proton Authenticator — encrypted Aegis and 2FAS exports too.
• Time-based, counter-based and Steam Guard codes; SHA-1, SHA-256 and SHA-512; 6 to 8 digits.

Finding them
• Search by service, account or group.
• Favourites stay at the top; groups like Work and Personal filter the list.
• Service logos so a long list reads at a glance — built in, never looked up online.
• Codes in AutoFill: apps and websites that ask for a code get your matching accounts above the keyboard.
• A home screen widget with your favourites' codes. With the lock on, a tap unlocks them for five minutes.
• A Quick Settings tile opens AuthWright from anywhere.

On your watch
AuthWright for Wear OS puts your codes on your wrist, in the app or a swipe from the watch face, from the phone beside it.

Your devices, not a server
• Pair with AuthWright on your Mac, iPhone, iPad or another Android device, and your accounts stay in step over your own Wi-Fi.
• There is no account to create and no cloud copy: secrets are kept in the Android Keystore and only ever travel to devices you paired.
• A deletion on one device never removes an account from another on its own: you choose Keep or Remove.

Security
• Lock with your fingerprint, face or screen lock, and AuthWright locks again when you leave it.
• Codes never appear in screenshots or the recent-apps view, and can be hidden until tapped.
• Copied codes are marked sensitive and cleared from the clipboard after a delay you choose.
• A warning if your phone's clock is far enough out to spoil codes.

Backup and recovery
• Export an encrypted backup, sealed with a passphrase only you know — with a reminder when some accounts aren't in one yet.
• Keep each site's recovery codes with its account, encrypted and synced.
• Transfer accounts to another authenticator app with standard transfer QR codes.

No ads, no tracking, no data collected.

What’s new

A simpler home screen widget: tap anywhere on it to unlock and show your codes for five minutes. The seconds left now sit level with each code.