AuthinCore Authenticator generates the rotating 6-digit two-factor (2FA) codes that protect your online accounts — built to be the smallest and most secure authenticator on Android.

WHY IT'S DIFFERENT
• Hardware-backed security — your secret keys are sealed inside the Android Keystore (StrongBox secure element where available) and are non-exportable. They can only be used within seconds of a biometric or device-PIN unlock.
• Truly offline — the app makes ZERO network requests. No account, no sign-up, no cloud. Your codes never leave your phone.
• No tracking, no ads — we collect nothing. There is no analytics SDK and the app cannot even reach the internet (no INTERNET permission).
• Tiny footprint — native Kotlin, no embedded browser or JS runtime.

FEATURES
• Standard RFC 6238 TOTP — works with Google, GitHub, Microsoft, AWS, social networks, banks, and any service that supports authenticator apps.
• Add accounts by scanning a QR code, pasting an otpauth:// link, or entering a setup key manually.
• Live codes with a per-account countdown ring; tap to copy.
• Search your accounts by name; clear, brand-tinted icons.
• Biometric / device-credential unlock on every open.
• Screenshot and screen-recording protection while the app is open; auto-locks the moment it goes to the background.

MOVE TO A NEW PHONE WITHOUT THE CLOUD
• Device-to-device transfer — show an animated QR on your old phone, scan it on the new one. Secrets travel directly, password-encrypted, never via a server.
• Encrypted file backup — export a password-protected backup file to a folder of your choice. The backup is encrypted on your device; only your password can open it.

PERMISSIONS
• Camera — used only to scan setup QR codes. No photos are saved or sent.

AuthinCore Authenticator pairs with the AuthinCore identity platform but works as a standalone authenticator for any TOTP-based service.