Comparison of OTP applications
Appearance
The following is a general comparison of OTP applications that are used to generate one-time passwords for two-factor authentication (2FA) systems using the time-based one-time password (TOTP) or the HMAC-based one-time password (HOTP) algorithms.
Authenticated implementations
Implementation | Description | Online sync. | Operating system / Platform | Non-default | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Windows | Mac | Linux | iOS | Android | J2ME | Other | Value length, d | Hash, H | Interval, TX | Epoch, T0 | Steam | |||
Aegis Authenticator | Free and open source app for Android to manage your 2-step verification tokens.[1] | Automatic backup to a location of your choosing | No | No | No | No | Yes | No | No | Yes | Yes | No | Yes | Yes |
Apple Keychain | Native password manager on Apple devices. Not on tvOS [2]. | Yes [3] | Yes [4] | Yes | No | Yes | No | No | Apple Vision Pro | Unknown | Unknown | Unknown | Unknown | Unknown |
Bitwarden | Open Source Cross platform password manager. 2FA is a premium feature.[5] | Yes | Yes | Yes | Yes | Yes | Yes | No | No | Yes | Yes | Yes | Unknown | Yes[6] |
Bitwarden Authenticator | Free and open source app for Android and iOS to manage your 2-step verification tokens.[7] | No | No | No | No | Yes | Yes | No | No | No | No | No | No | No |
SAASPASS Authenticator [8] | Cross-platform 2FA Authenticator with TOTP & HOTP generator with sharing capabilities and password manager integration. Multiple device support, Mobile app and web access with multiple backup capabilities. | Yes | Yes | Yes | Yes | Yes | Yes | No | No | Yes | Yes | Yes | Yes | Yes |
Google Authenticator | Yes | No | No | No | Yes | Yes | No | No | No | No | No | No | No | |
Yandex Key[9] | Simple app for phones from Russian company | Yes, manually, for 1 year | No | No | No | Yes | Yes | No | No | Unknown | Unknown | Unknown | Unknown | Unknown |
IBM Security Verify | Unknown | No | No | No | Yes | Yes | No | No | Unknown | Unknown | Yes | Unknown | Unknown | |
Microsoft Authenticator | Yes | No | No | No | Yes | Yes | No | No | No | No | No | No | No | |
1Password | Cross-platform password manager[10] | Yes | Yes | Yes | Yes | Yes | Yes | No | No | No | Unknown | Unknown | Unknown | Unknown |
Authy | By Twilio, from 2015, originally Authy.[11] Previously available for Chrome.[12] | Yes | Discontinued March 19, 2024[13] | Yes | Yes | No | No | Yes | No | No | No | No | ||
Enpass[14] | Password manager by Sinew Software Systems. Syncs over multiple back-ends. | Yes | Yes | Yes | Yes | Yes | Yes | No | No | Yes | No | Yes | Unknown | No |
FreeOTP[15] | Maintained by RedHat, and based on Google Authenticator. | No | No | No | No | Yes | Yes | No | No | Yes | Yes | Yes | No | No |
oathtool [16]
|
Command-line tool for generating OTP tokens. | No | No | No | Yes | No | No | No | No | Yes | Yes | Yes | Yes | Unknown |
privacyIDEA Authenticator[17] | For use with privacyIDEA Authentication Server, with a secure enrollment process. | No | No | No | No | Yes | Yes | No | No | Yes | Yes | Yes | No | Unknown |
andOTP[18] (unmaintained)[19] | Open-source app for Android 4.4+. Compatible with Google Authenticator. | No | No | No | No | No | Yes | No | No | No | No | Yes | No | No |
Invantive Authenticator[20] | Focuses on integration with Invantive Keychain. | No | Yes | No | No | No | No | No | No | Yes | Yes | Yes | Yes | No |
LastPass Authenticator[21] | Cross-platform OTP for mobile devices with support for online backup. | Yes | No | No | No | Yes | Yes | No | No | No | No | No | No | No |
Symantec VIP | Unknown | No | No | No | Yes | Yes | No | Unknown | Unknown | Unknown | Unknown | Unknown | Unknown | |
TOTP.APP[22] | Web-based authenticator not requiring registration. | No | Yes | Yes | Yes | Yes | Yes | No | No | No | No | No | No | No |
Yubico Authenticator for Desktop[23] | By Yubico, for use with Yubikeys. | No | Yes | Yes | Yes | — | — | No | No | Yes | Yes | Yes | No | No |
Yubico Authenticator for Mobile | — | — | — | Yes | Yes | |||||||||
KeePassXC[24] | Password manager | Through user setup with Syncthing,[25] or only within the KeeWeb[26] online web App[27] | Yes | Yes | Yes | No | KeePassDX[28] | No | No | Yes | Yes | Yes | No | Yes |
2FAS[29] | Popular, feature rich open-source two-factor authenticator. No account required. | Online backup/sync via iCloud or Google Drive | Through browser extension connected to mobile app | Yes | Yes | No | No | Yes | Yes | Yes | No | No | ||
2FAuth[30] | An open-source PHP web based self-hosted OTP generator, designed for both mobile and desktop. | Yes, web based | No | No | Yes | Yes | Yes | No | Yes | |||||
totp-cli[31] | Popular, feature rich open-source two-factor authenticator. No account required. | Manually | No | No | Yes | Yes | No | No | No | Unknown | Unknown | Unknown | Unknown | Unknown |
Open Authenticator[32] | Free, open-source and multiplatform app to manage your TOTPs. | Yes, requires a subscription for more than 6 TOTPs | Yes | Yes | No | No | Yes | No | No | Yes | Yes | Yes | No | No |
TOTP ME[33] | Free, open-source J2ME MIDlet app to manage your TOTPs. | Manually | Using MicroEmulator app[34] | Unknown | Using J2ME Loader app[35] | Yes | Any with J2ME support or emulator | Yes | Yes | Yes | Time correction in seconds | No | ||
Hotpants[36] | Free, open-source J2ME MIDlet app to manage your TOTPs and HOTPs. | Import via scanning QR code on screen | No | No | No | No | No | Yes | No | Unknown | Unknown | Unknown | Unknown | No |
Tessera[37] | Free, open-source Qt for Symbian and desktop app to manage your TOTPs. | Unknown | Initial support for desktop | No | Could be ported | No | Symbian S60 5th Edition | Unknown | Unknown | Unknown | Unknown | Unknown |
See also
References
- ^ "Aegis Authenticator - Secure 2FA app for Android". Aegis Authenticator. Retrieved 29 April 2023.
- ^ "Sending passwords to other users or Apple devices". Apple Support. 18 February 2021. Retrieved 23 August 2024.
AppleTV (tvOS) has no iCloud Keychain but can receive credentials ad-hoc from nearby Apple devices. Evident in these paragraphs: Filling in credentials in apps on Apple TV Password AutoFill is available to fill credentials in apps on Apple TV. When the user focuses on a username or password text field in tvOS, Apple TV begins advertising a request for Password AutoFill over Bluetooth Low Energy (BLE). Any nearby iPhone or iPad displays a prompt inviting the user to share a credential with Apple TV. Here's how the encryption method is established: - If the device and Apple TV use the same iCloud account, encryption between the devices happens automatically. - If the device is signed in to an iCloud account other than the one used by Apple TV, the user is prompted to establish an encrypted connection through use of a PIN code. To receive this prompt, the iPhone must be unlocked and in close proximity to the Siri Remote paired to that Apple TV. After the encrypted connection is made using BLE link encryption, the credential is sent to Apple TV and is automatically filled in to the relevant text fields on the app.
{{cite web}}
: line feed character in|quote=
at position 129 (help)CS1 maint: url-status (link) - ^ "Set up iCloud Keychain". Apple Support. 5 August 2024. Archived from the original on 6 August 2024. Retrieved 23 August 2024.
With iCloud Keychain, you can keep your passwords (and other secure information) updated across your devices and shared with the people that you trust.
- ^ "Set up iCloud Passwords on your Windows computer — in: iCloud for Windows User Guide". Apple Support. Retrieved 23 August 2024.
After you set up iCloud for Windows, you can use iCloud Passwords to access your passwords in Google Chrome or Microsoft Edge using a browser extension. You can also manage your passwords in the iCloud Passwords app.
{{cite web}}
: CS1 maint: url-status (link) - ^ "Pricing for Individuals and Families | Bitwarden". Bitwarden. Retrieved 23 March 2023.
- ^ "Steam Guard TOTPs". Bitwarden. Retrieved 23 March 2023.
- ^ "Bitwarden just launched a new authenticator app. Here's what it means to users. | Bitwarden Blog". Bitwarden.
- ^ "The 5 Best Two-Factor Authentication Apps for iPhone & Android". Gadget Hacks. 28 February 2020. Retrieved 28 February 2020.
- ^ "Yandex Key - Yandex ID. Help". yandex.com. Retrieved 28 May 2024.
- ^ "Use 1Password as an authenticator for sites with two-factor authentication". 1Password. Retrieved 7 September 2018.
- ^ Lardinois, Frederic (24 February 2015). "Twilio Acquires Two-Factor Authentication Service Authy". TechCrunch. Retrieved 5 March 2018.
- ^ "Authy for Chrome App & Extension End of Life". Authy Support. Retrieved 14 February 2024.
- ^ "Business customer guide: End of Life (EOL) for use of Authy API with Twilio Authy Desktop apps". Authy Support. Retrieved 14 February 2024.
- ^ "Best password manager for iOS, Android, Windows, Linux, Mac | Enpass". www.enpass.io. Retrieved 7 September 2018.
- ^ "FreeOTP". freeotp.github.io.
- ^ "OATH Toolkit". www.nongnu.org. Retrieved 7 September 2018.
- ^ "privacyIDEA Authenticator". GitHub. Retrieved 7 September 2018.
- ^ "andOTP/andOTP". GitHub.
- ^ flocke (15 July 2017). "[Unmaintained][App][4.4+][Open source] andOTP - Open source two-factor authentication for Android". XDA Forums. Retrieved 12 March 2023.
- ^ B.V., Invantive Software. "Invantive Authenticator". two-step-verification.solutions. Retrieved 7 September 2018.
- ^ "LastPass - LastPass Authenticator". lastpass.com. Retrieved 7 September 2018.
- ^ "Online one-time password generator / TOTP (Google Authenticator) Online". totp.app. Retrieved 7 September 2018.
- ^ "Using Your YubiKey with Authenticator Codes : Yubico Support". support.yubico.com. Archived from the original on 2 October 2018. Retrieved 11 March 2023.
- ^ Team, KeePassXC. "KeePassXC 2.2.0 released - KeePassXC". keepassxc.org.
- ^ "KeePassXC + KeePassDX (Android) Sync guide. A complete starting guide for new users". reddit.com. 10 September 2021. Retrieved 7 July 2023.
- ^ "Free Password Manager Compatible with KeePass: KeeWeb". keeweb.info. Retrieved 7 July 2023.
- ^ "KeeWeb". keeweb.info. Retrieved 7 July 2023.
- ^ "KeePassDX". keepassdx.com. Retrieved 7 July 2023.
- ^ "2FA Authenticator App (2FAS)". 2FAS. Retrieved 12 March 2023.
- ^ "GitHub - Bubka/2FAuth: A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes". GitHub. Bubka. Retrieved 19 March 2023.
- ^ "Authy/Google Authenticator like TOTP CLI tool written in Go". GitHub. Retrieved 28 May 2024.
- ^ "Open Authenticator : Secure your online accounts with a free, open-source and lovely-crafted app". Skyost. Retrieved 22 July 2024.
- ^ Cacek, Josef (14 April 2024), kwart/totp-me, retrieved 12 August 2024
- ^ "totp-me - TOTP for Java ME - Google authenticator". SourceForge.
- ^ Shakarun, Nikita, nikita36078/J2ME-Loader
- ^ Matti (4 August 2024), baumschubser/hotpants, retrieved 12 August 2024
- ^ Janiszewski, Maciej (10 April 2024), ksiazkowicz/Tessera, retrieved 12 August 2024