# SecureAuth: Offline 2FA

> Private, offline 2FA authenticator with an encrypted password vault.

Canonical page: [https://chrome-stats.com/d/com.kaandikec.secure\_auth](https://chrome-stats.com/d/com.kaandikec.secure_auth)

## Overview

- **ID:** `com.kaandikec.secure_auth`
- **Platform:** Android
- **Type:** Android app
- **Status:** Available
- **Publisher:** KingSmile Studios
- **Category:** TOOLS
- **Downloads:** 12
- **Version:** 2.0.1
- **Last updated:** 2026-07-07
- **First published:** 2026-07-04
- **Publisher country:** TR
- **Size:** 30 MB
- **Data as of:** 2026-09-10
- **Store listing:** [Google Play Store](https://play.google.com/store/apps/details?id=com.kaandikec.secure_auth)
- **Website:** [https://kaandikec.com](https://kaandikec.com/)
- **Privacy policy:** [https://kaandikec.com/SecureAuth/](https://kaandikec.com/SecureAuth/)

## Description

SecureAuth is a privacy-first, fully offline two-factor authentication (2FA) app and password vault. No cloud. No accounts. No telemetry. No ads. Every secret stays on your device — the app doesn&#39;t even request internet permission.<br><br>TWO-FACTOR AUTHENTICATION<br>• TOTP (RFC 6238), HOTP (RFC 4226) and Steam Guard tokens<br>• SHA-1 / SHA-256 / SHA-512, 4–8 digits, 15–60s periods<br>• Add accounts by QR scan, from an image, or manually<br>• Show any account as a QR code to move it to another device<br>• Live search, drag-to-reorder, next-code preview<br><br>PASSWORD VAULT &amp; AUTOFILL<br>• Store passwords and passkeys in an encrypted local vault<br>• System-wide autofill via Android Credential Manager<br>• Biometric-gated access to your credentials<br><br>SERIOUS SECURITY<br>• Argon2id password hashing (Password Hashing Competition winner)<br>• AES-256 encrypted local database<br>• Brute-force protection with exponential-backoff lockout<br>• Optional data wipe after repeated failed attempts<br>• Auto-lock on inactivity, clipboard auto-clear<br>• Screenshot blocking &amp; app-switcher privacy<br>• Clock-tamper detection and a security audit log<br><br>BACKUPS YOU CONTROL<br>• AES-256-GCM + Argon2id encrypted backup files<br>• Plain JSON export for interoperability<br>• Import from encrypted or plain backups — all offline<br><br>13 LANGUAGES<br>English, Türkçe, Deutsch, Español, Français, Português, Русский, العربية, Azərbaycanca, 日本語, 한국어, 中文 and more.<br><br>100% open source. Your secrets belong to you — SecureAuth just keeps them safe.

## Rankings

- #2,766,617 — Overall

## Permissions and access

### Permissions

- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.CAMERA`
- `android.permission.INTERNET`
- `android.permission.READ_EXTERNAL_STORAGE`
- `android.permission.RECORD_AUDIO`
- `android.permission.USE_BIOMETRIC`
- `android.permission.USE_FINGERPRINT`
- `com.android.vending.CHECK_LICENSE`
- `com.kaandikec.secure_auth.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION`

## Similar extensions and apps

- [Secure Key Authenticator](https://chrome-stats.com/d/com.securekey.passwordvault) — 1 users
- [OfflineAuth- 2FA Authenticator](https://chrome-stats.com/d/com.autherticotr.offlineauth) — 2 users
- [AuthGuard 2FA](https://chrome-stats.com/d/com.pixelforgeapps.authguard2fa) — 84 users
- [SecureOTP Authenticator App](https://chrome-stats.com/d/com.zorixstudio.secureotp) — 31 users
- [Authly: Offline Authenticator](https://chrome-stats.com/d/com.neoapplications.authly) — 37 users
- [Authenticator Offline TOTP 2FA](https://chrome-stats.com/d/com.robfly.authenticator) — 155 users
- [SecureKey: Password & 2FA Auth](https://chrome-stats.com/d/com.jappier.passwordgenerator) — 53 users
- [SecureVault - Password Manager](https://chrome-stats.com/d/com.marwadiuniversity.securevault) — 22 users
- [Secure Vault: Password Manager](https://chrome-stats.com/d/com.prathamesh.securevault) — 31 users
- [Authenticator – 2FA & Vault](https://chrome-stats.com/d/com.pratik.authenticator) — 20 users
- [Authenticator - Authkey 2FA](https://chrome-stats.com/d/com.vas.authenticator) — 192,192 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/com.kaandikec.secure_auth)