Secure MFA Authenticator

Secure MFA is a local-first TOTP authenticator for managing two-factor authentication codes.

Your MFA data is stored locally on your device. Secure MFA has no user account, cloud vault, or background cloud synchronization service. Core authentication features do not depend on cloud storage.

Features:

• Scan MFA QR codes or enter secrets manually
• Generate standard TOTP verification codes
• Search, edit, favorite, and reorder MFA entries
• Protect vault access with system biometrics or device credentials
• Export and restore passphrase-encrypted local backups
• Copy selected MFA entries from Chrome to Android using encrypted offline QR codes
• Detect duplicate MFA entries during batch import
• Generate random passwords without saving them

Offline QR transfer encrypts the selected MFA entries before displaying them. The separate transfer code required for decryption is not embedded in the QR code and is not stored.

Secure MFA never overwrites existing MFA entries during import. Every entry that is actually imported receives a new local identifier.

Keep your encrypted backups and backup passphrases safe. Secure MFA cannot recover lost data through a server if your device or vault key becomes unavailable and no valid backup exists.

This release supports standard TOTP. HOTP, Steam OTP, passkeys, password vaults, and cloud synchronization are not currently supported.