Tokn - MFA / 2FA authenticator

Tokn is a small, privacy-first 2FA / MFA authenticator. Your one-time codes stay on your device, encrypted. No accounts, no cloud sync, no analytics, no ads.

A simple, open-source TOTP / HOTP authenticator for people who do not want their second factor in someone else's cloud.

WHY TOKN

• Private by design. No sign-up, no telemetry, and no Google Play Services on your device.
• Encrypted vault. Stored in an SQLCipher database, unlocked with biometrics (fingerprint or face) or a password.
• Works fully offline. Codes are generated locally on your phone.
• Open source. GPL-3.0, source available on GitHub, also published on F-Droid.

FEATURES

• TOTP and HOTP support per RFC 6238 and RFC 4226
• SHA-1, SHA-256 and SHA-512
• Add accounts by scanning a QR code with the camera or from a gallery image
• Manual entry for codes you cannot scan
• Biometric unlock with password fallback
• Encrypted backup and restore for moving to a new phone or keeping a copy
• Device-to-device sync over local Wi-Fi, Wi-Fi Direct or animated QR code. Nothing leaves your network and the handshake is end-to-end encrypted
• Organize accounts with custom groups, multiple groups per account
• Custom icons and importable icon packs (Aegis-compatible)
• Material 3 design with light, dark or system theme and optional Material You colors
• Screenshot protection keeps codes out of the recents preview and blocks screen capture

SWITCHING FROM ANOTHER 2FA APP

Tokn imports backups from Aegis, 2FAS, Google Authenticator and standard otpauth:// URIs. Bring your existing accounts over in minutes.

WORKS WITH

Any service that supports standard TOTP or HOTP two-factor authentication. Google, GitHub, GitLab, Microsoft, Amazon, Discord, Twitch, Reddit, Dropbox, Proton, and thousands more.

LICENSE

Tokn is free software, released under the GNU General Public License v3.0 or later.

Source code, releases and issue tracker:
https://github.com/fthomys/tokn