PocketAuth generates the 6-digit sign-in codes for your accounts - Google, Microsoft, GitHub, Amazon, your bank and thousands more - right on your phone. No internet, no account, no ads.
Private by default • Codes are generated on your device and never sent anywhere • Stored in an encrypted vault protected by your phone's secure hardware • No ads, no analytics, no trackers • Open source - anyone can check exactly what it does
Works without internet Codes are calculated from your phone's clock, so PocketAuth works in airplane mode, abroad, or with no signal.
Locked when you're not looking • Fingerprint, face or screen-lock unlock • Auto-lock after a time you choose • Hide codes until tapped • Screenshots and the Recents preview are blocked by default
Easy to set up • Scan a QR code, or type the setup key yourself • 860+ service icons, so you can find each account at a glance • Name suggestions for 1,700+ services as you type • Search, folders and custom sort order • See the next code before the current one expires • Home-screen widget and Quick Settings tile
Bring your codes with you • Import from Google Authenticator, Aegis and 2FAS • Export to Google Authenticator by QR code • Password-protected backup file you can keep anywhere
Optional encrypted cloud backup Sign in with Google only if you want your codes backed up and synced to your other devices. Everything is end-to-end encrypted on your phone before upload - the server stores data it cannot read. A 24-word recovery key means you can always get back in, even if you forget your backup passphrase.
Standards you already use Supports time-based (TOTP) and counter-based (HOTP) codes, with SHA-1, SHA-256 and SHA-512, 6 to 8 digits, and custom periods - compatible with any website that offers an "authenticator app" option.
PocketAuth is free software under the GNU GPL v3.
Offline 2FA codes, encrypted on your phone. Open source, no account needed.