Authenticator by Hottub

Hottub

About this app

Authenticator by Hottub is a free two-factor authenticator for Android. It makes the one-time codes that protect your accounts, keeps your setup keys encrypted on your phone, and moves with you through encrypted backups. No ads, no tracking, and no account required.

ADD ANY ACCOUNT THAT SUPPORTS 2FA
Turn on two-factor authentication (2FA, also called MFA) for any website or app that offers an authenticator app, then scan its QR code or type its setup key. Authenticator by Hottub makes standard time-based one-time passwords (TOTP), the six- or eight-digit verification codes almost every service uses.

MOVE FROM GOOGLE AUTHENTICATOR IN ONE SCAN
Export your accounts from Google Authenticator, then scan the QR codes or pick screenshots from your gallery. Large exports that span several QR codes are fine. You review every account on your phone before anything is added, duplicates are skipped, and Authenticator by Hottub tells you about any entry it cannot import so you can keep it where it is.

FIND THE RIGHT CODE FAST
Search by service, account or group, keep favorites at the top, and tap a code to copy it. A countdown shows when each code changes, and TalkBack reads codes digit by digit. Phones, tablets and foldables get a layout that fits the screen.

ENCRYPTED, AND HIDDEN WHEN IT SHOULD BE
Setup keys live in an encrypted vault backed by the Android Keystore. Turn on app lock to require your fingerprint, face or screen lock. Codes never appear in screenshots, screen recordings or the Recents screen, and copied codes are marked sensitive and cleared from the clipboard.

BACKUPS YOU CONTROL
Make an encrypted backup locked with a passphrase only you know, and restore it on a new Android phone or an iPhone. Hottub can never open it. Encrypted cloud backup is optional when you connect a Hottub account.

APPROVE SIGN-INS WITH NUMBER MATCHING
Connect a Hottub account and approve Hottub sign-ins from your phone. To approve, tap the number shown on the screen you're signing in on; a wrong number blocks the sign-in. Approving needs your fingerprint, face or screen lock. Deny is always one tap, and "This wasn't me" reports a sign-in you didn't start.

PRIVATE BY DESIGN
The authenticator works signed out and offline. Your setup keys are never uploaded unless you turn on encrypted cloud backup, and Hottub cannot read them even then. You can delete your optional Hottub account from inside the app.

WHAT YOU GET
- TOTP one-time password codes for any service that supports authenticator apps
- QR scanner, setup-key entry, and Google Authenticator import from camera or screenshots
- Search, favorites, groups, countdowns and tap-to-copy
- Encrypted vault with optional biometric or screen-lock app lock
- Codes hidden from screenshots, screen recording and Recents
- Encrypted backup and restore across Android and iPhone
- Optional Hottub sign-in approvals with number matching
- Free, with no ads and no tracking

What’s new

Hottub Auth is now Authenticator by Hottub, with a new icon. Your codes, backups and sign-in approvals work exactly as before.