authenticator app · Two Factor Authentication Service, Inc.

2FAS Auth

Free, open-source phone authenticator with backup to your own iCloud or Google Drive and no account.

73/100

#4 of 12 authenticator apps
Facts checked 8 Oct 2026

In short

The app is free, works offline and needs no account¹.
It runs on iOS and Android only; there is no desktop app².
Backups go to your iCloud or Google Drive and can be protected with a password you choose^1,3.
Code is open source under GPL-3.0^5,6.
It supports TOTP, HOTP and Steam codes, and imports from five other apps plus its own .2fas files^8,9.

2FAS Auth suits people with a phone who want a free, open-source app with no sign-up and backup in their own cloud^1,3,5. PIN or biometric lock, groups and search are included⁹. The catch: it is phone-only, the backup password is optional, and its pages name no outside audit or bug bounty^2,3,10,11.

Best for: iPhone and Android users who want a free app without an account.

Where the points come from

Security and trust24 of 37

Backup and recovery35 of 35

Systems4 of 12

Features6 of 12

Price4 of 4

Security and trust 24 of 37 points

Rule	What is published	Points
End-to-end encrypted backup	YesThe page says cloud sync is end-to-end encrypted by default and a backup can be encrypted with your own password. The password is optional^3,4.	12 / 12
Independent audit, 2023 or later	Not publishedNot published on the vendor's about page or security policy^10,11.	0 / 10
Open-source apps	YesAndroid and iOS repositories are licensed under the GNU GPL v3.0^5,6.	6 / 6
Public bug bounty	Not publishedNot published; the security policy only covers private reporting by email¹⁰.	0 / 3
App lock	YesA 4- or 6-digit PIN, with biometric unlock after a PIN is set⁹.	6 / 6

Backup and recovery 35 of 35 points

Rule	What is published	Points
Cloud backup or sync	YesOptional sync to your personal iCloud or Google Drive¹.	10 / 10
Same codes on several devices	YesConnect the same iCloud or Google Drive account on each device; cross-platform needs a backup file⁷.	7 / 7
Export all accounts	YesExport a .2fas backup file of all tokens, with or without a password⁹.	7 / 7
Import from other apps	YesImports from Aegis, Raivo, LastPass, Stratum, Google Authenticator and .2fas files⁸.	6 / 6
Works without an account	YesThe app page says it does not require an account to use¹.	5 / 5

Systems 4 of 12 points

Rule	What is published	Points
Apps	iOS, AndroidDownload page lists iOS and Android apps and browser extensions only².	4 / 12

Features 6 of 12 points

Rule	What is published	Points
Stores passkeys	Not publishedNot published on the vendor's app page and tutorial^1,9.	0 / 3
Sign-in approval prompts	Not publishedNot published as sign-in approval; push is used only to pair the browser extension¹.	0 / 3
Counter-based (HOTP) codes	YesThe repository README says the app supports TOTP and HOTP⁵.	3 / 3
Folders, tags or search	YesUnlimited groups, search by service name and manual or A-Z sorting⁹.	3 / 3

Price 4 of 4 points

Rule	What is published	Points
Cost with backup on two devices	$0Free app; backup and two-device sync use your own cloud account^1,7.	4 / 4

The rule behind each line: how we score authenticator apps.

Plans and prices

As the vendor lists them, before tax. Prices are in US dollars unless the plan shows euros; the points use US dollars, with euros converted at the ECB rate.

Plan	Price as listed	Per month	Notes
Free1 person	Free¹	$0	Whole app is free; backup uses your own iCloud or Google Drive

Strengths

Free, anonymous and usable offline¹.
Open source under GPL-3.0^5,6.
Backup to iCloud or Google Drive, with an optional password^1,3.
Imports from Aegis, Raivo, LastPass, Stratum and Google Authenticator, plus its own .2fas files⁸.
Supports TOTP, HOTP and Steam codes, groups, search and a PIN or biometric lock⁹.

Limits

Apps exist only for iOS and Android².
The password on a backup is optional; an export without one is unencrypted⁹.
Moving codes between iOS and Android needs an exported file, not cloud sync⁷.
No outside audit or bug bounty is named on its pages^10,11.

What Two Factor Authentication Service, Inc. says

Vendor claims. We show them, but they earn no points.

2FAS says the app is 100% free and works offline¹.

Other authenticator apps

1
Ente AuthPeople who want encrypted sync, open source and a web view of their codes
91/100
$0cost with backup on two devices
2
Proton AuthenticatorPeople who want encrypted sync and a Windows or Linux app
79/100
$0cost with backup on two devices
3
Zoho OneAuthPeople who want free encrypted backup and the same codes on a phone and a computer
74/100
$0cost with backup on two devices
5
StratumAndroid users who want an offline, open-source app they fully control
60/100
Not publishedcost with backup on two devices

All 12 authenticator apps

Sources

2FAS Auth, 2FAS. Accessed 8 Oct 2026.
Download 2FAS, 2FAS. Accessed 8 Oct 2026.
Is 2FAS backup safe?, 2FAS. Accessed 8 Oct 2026.
Is 2FAS end-to-end encrypted?, 2FAS. Accessed 8 Oct 2026.
twofas/2fas-android, GitHub. Accessed 8 Oct 2026.
twofas/2fas-ios, GitHub. Accessed 8 Oct 2026.
How to sync more devices with 2FAS, 2FAS. Accessed 8 Oct 2026.
Which imports are supported in the 2FAS app?, 2FAS. Accessed 8 Oct 2026.
2FAS Auth app tutorial, 2FAS. Accessed 8 Oct 2026.
2FAS security policy, GitHub. Accessed 8 Oct 2026.
About 2FAS, 2FAS. Accessed 8 Oct 2026.

Website: 2fas.com/auth · Markdown version · We are not affiliated with Two Factor Authentication Service, Inc..