BC Authenticator

Your keys. Your device.

BC Authenticator is a simple, private way to generate two-factor authentication codes. Your setup keys stay encrypted on your Android device. No account, no cloud sync, no ads, and no subscription. Totally free. Zero data collection.

ADD ACCOUNTS YOUR WAY
Scan a standard authenticator QR code or enter a setup key manually. Camera access is optional, and QR codes are processed entirely on your device.

READY WHEN YOU NEED A CODE
Generate time-based (TOTP) and counter-based (HOTP) codes without an internet connection. Search your accounts, copy a code, edit account labels, or remove an account you no longer need. Supports SHA-1, SHA-256, and SHA-512 with 6- or 8-digit codes.

CALM, CLEAN DESIGN
A flat Material 3 interface with smooth transitions, clear countdowns, and Auto, Dark, and Light themes. Auto follows your device’s appearance setting.

PRIVATE BY DESIGN
Your vault is encrypted using a device-bound Android Keystore key. Optional device lock requires your screen lock or supported biometrics when opening the app. Screenshots and app-switcher previews are blocked. There is no internet permission, analytics, tracking, or remote crash reporting.

IMPORTANT: KEEP YOUR RECOVERY CODES
BC Authenticator has no backup, export, or device transfer. Uninstalling the app, clearing its data, losing your phone, or losing the device encryption key can permanently remove your authenticator keys. Store each service’s recovery codes somewhere safe before relying on this app. Removing an account here does not disable two-factor authentication at the service.

Designed for standard otpauth QR codes and Base32 setup keys. Proprietary migration QR codes, push approvals, and service-specific code formats are not supported. For time-based codes, keep your device’s date and time set automatically.