iAuth

iAuth keeps your two-factor codes where they belong — on your device, encrypted, and never anywhere else.

A modern authenticator for TOTP, HOTP, and Steam Guard. No account, no sign-in, no telemetry, no cloud sync — just the codes you
need, generated locally, backed up only when you ask.

Core features (free):
• Time-based (TOTP), counter-based (HOTP), and Steam Guard codes
• Scan QR codes from any service
• Encrypted vault unlocked by a master password
• PIN and biometric unlock — for speed, not for trust
• Encrypted .iauth backup files you control
• Import from Google Authenticator (single and multi-batch QR)
• Import from 2FAS
• Export to Google Authenticator
• Privacy-first design — vault locked by default after every backgrounding

iAuth Plus — $4.99 once, lifetime, no subscriptions:
• Brand icons for 40 popular services, with monogram fallback for the rest
• AMOLED-black theme and 6 accent presets (Bench Steel, Ember, Sage, Plum, Sun, Rose)
• Pin accounts to the top of your list
• Drag-to-reorder
• Custom sort (manual, alphabetical, most recent)
• Privacy mode (codes and labels hidden by default)
• Folders to organise accounts (Personal, Work, or your own)

Built on principles, not promises:
• Encrypted at rest with AES-256-GCM
• Master password hardened with Argon2id (OWASP profile #3)
• Biometric and PIN wrap the same vault key — losing one never loses the vault
• Clipboard auto-clears after copying a code
• Screen-recording protection on sensitive views
• No analytics SDK. No advertising. No third-party trackers.

iAuth does one thing and does it well: it keeps your second factor safe and out of reach of anything that does not belong on your
device. If you have outgrown the lack of backups in older authenticators, want a way out of cloud-locked services, or simply
believe your authentication codes belong only to you — iAuth is for you.

Privacy policy: https://khaledghallab.com/app-privacy-policy
More apps by Khaled Ghallab: https://khaledghallab.com/en/apps