Tokn - MFA / 2FA authenticator

Tokn - MFA / 2FA authenticator

Open-source 2FA authenticator. Encrypted on-device. No accounts.

fthomys Password & 2FA Security

Download (15 MB) Website

Screenshots

Screenshot of Tokn - MFA / 2FA authenticator Screenshot of Tokn - MFA / 2FA authenticator Screenshot of Tokn - MFA / 2FA authenticator Screenshot of Tokn - MFA / 2FA authenticator Screenshot of Tokn - MFA / 2FA authenticator Screenshot of Tokn - MFA / 2FA authenticator Screenshot of Tokn - MFA / 2FA authenticator Screenshot of Tokn - MFA / 2FA authenticator

Description

Tokn is a small, privacy-first 2FA / MFA authenticator. Your one-time codes stay on your device, encrypted. No accounts, no cloud sync, no analytics, no ads.

A simple, open-source TOTP / HOTP authenticator for people who do not want their second factor in someone else's cloud.

WHY TOKN

• Private by design. No sign-up, no telemetry, and no Google Play Services on your device.
• Encrypted vault. Stored in an SQLCipher database, unlocked with biometrics (fingerprint or face) or a password.
• Works fully offline. Codes are generated locally on your phone.
• Open source. GPL-3.0, source available on GitHub, also published on F-Droid.

FEATURES

• TOTP and HOTP support per RFC 6238 and RFC 4226
• SHA-1, SHA-256 and SHA-512
• Add accounts by scanning a QR code with the camera or from a gallery image
• Manual entry for codes you cannot scan
• Biometric unlock with password fallback
• Encrypted backup and restore for moving to a new phone or keeping a copy
• Device-to-device sync over local Wi-Fi, Wi-Fi Direct or animated QR code. Nothing leaves your network and the handshake is end-to-end encrypted
• Organize accounts with custom groups, multiple groups per account
• Custom icons and importable icon packs (Aegis-compatible)
• Material 3 design with light, dark or system theme and optional Material You colors
• Screenshot protection keeps codes out of the recents preview and blocks screen capture

SWITCHING FROM ANOTHER 2FA APP

Tokn imports backups from Aegis, 2FAS, Google Authenticator and standard otpauth:// URIs. Bring your existing accounts over in minutes.

WORKS WITH

Any service that supports standard TOTP or HOTP two-factor authentication. Google, GitHub, GitLab, Microsoft, Amazon, Discord, Twitch, Reddit, Dropbox, Proton, and thousands more.

LICENSE

Tokn is free software, released under the GNU General Public License v3.0 or later.

Source code, releases and issue tracker:
https://github.com/fthomys/tokn

What’s new (1.8.1)

Translation Hotfix release
* New: recycle bin for deleted accounts, with an undo option. Enabled by default (Settings > App behavior).
* New: automatic local backups, with an entry in Backup & Restore.
* New: audit log in Settings showing vault, account, and backup activity.
* New: export a single account as a QR code from its menu.
* New: stay revealed setting to keep a code visible after copying (Settings > Security).

Versions

Version Date Size Requires Android Download
1.8.1 current
d7b339965bea1976…
 2026-07-16 15 MB API 26
1.7.0
c16bf0fe79b83b94…
 2026-06-14 14 MB API 26
1.6.3
97ec8b6598f6a305…
 2026-06-11 14 MB API 26

Permissions

What the app asks the system for. Android only grants sensitive access after you confirm it.

  • Internet accessSend and receive data over the internet.
  • CameraTake photos and videos.
  • BiometricsUnlock with fingerprint or face.
  • FingerprintUnlock with a fingerprint.
  • Network stateCheck whether and how the device is connected.
  • Wi-Fi stateRead information about the Wi-Fi connection.
  • Change Wi-FiTurn Wi-Fi on and off or switch networks.
  • CHANGE_WIFI_MULTICAST_STATE
Show 4 more permissions
  • Precise locationDetermine the location via GPS.
  • NEARBY_WIFI_DEVICES
  • ACCESS_LOCAL_NETWORK
  • tokn.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Comments