IITK Authenticator

INDIAN INSTITUTE OF TECHNOLOGY KANPUR

About this app

IITK Authenticator is the official two-factor authentication app developed by the Computer Centre, IIT Kanpur. It generates secure Time-based One-Time Passwords (TOTP) for your IIT Kanpur webmail account and any other service that supports 2FA — including Google, GitHub, Microsoft, Dropbox, and more.

📱 EASY TO USE

• Scan a QR code or enter a secret manually to add any TOTP account in seconds
• Clean, distraction-free interface with live countdown timers
• One-tap copy — code is automatically cleared from clipboard after 30 seconds
• Supports 6, 7, and 8-digit codes with custom refresh intervals
• SHA1, SHA256, and SHA512 algorithm support
• Dark mode and 18 colour themes
• Hindi and English language support

🔒 BUILT FOR SECURITY

• AES-256-GCM encryption — every secret is encrypted on your device using a key stored in your phone's hardware-backed secure enclave
• PBKDF2 PIN protection — your 4-digit PIN is never stored; it is hashed with 100,000 iterations of PBKDF2-HMAC-SHA256
• Fully offline — no internet connection, no cloud sync, no analytics, no ads. Your secrets never leave your device.
• Biometric unlock — fingerprint or Face ID for fast, secure access
• Brute-force lockout — 5 wrong PIN attempts locks the app for 10 minutes
• Root/jailbreak detection — warns you if your device's security may be compromised

🎓 MADE FOR IITK

Developed and maintained by the Computer Centre, IIT Kanpur. Optimised for IIT Kanpur webmail 2FA setup at webmail.iitk.ac.in. Scan your 2FA QR code once during setup — then get instant access codes every 30 seconds.

📦 PRIVACY FIRST

No accounts. No registration. No server. All data is stored exclusively on your device using hardware-grade encryption. We collect zero data. There is nothing to share, sell, or lose.

Developed by Computer Centre, IIT Kanpur.
Website: https://webmail.iitk.ac.in