AuthBand

Two-factor codes on your wrist. AuthBand stores your TOTP secrets in the iOS Keychain, syncs to Apple Watch peer-to-peer, and never makes a network call.

AuthBand is a Time-Based One-Time Password authenticator built for Apple Watch. Add accounts on iPhone, glance at codes on your wrist.

On the watch • The full account list, with live countdown timers, lives natively on your Apple Watch — no need to pull out the phone. • Tap a row on iPhone to copy a code; the clipboard entry is set to expire within the current 30-second TOTP window. • Import accounts by scanning an otpauth:// QR code, picking screenshots from your photo library (multi-select), or pasting a Google Authenticator export QR.

On privacy • No network, no cloud, no third-party SDKs. AuthBand makes zero outbound requests. There is no backend, no analytics, no crash reporter. • TOTP secrets live in the iOS Keychain with the strictest reasonable protection class — bound to your device passcode, never synced through iCloud Keychain. • Sync between paired iPhone and Apple Watch goes through WatchConnectivity only — peer-to-peer, no server in the middle. • Face ID / Touch ID / passcode gate on every launch. An opaque overlay covers the app when it goes inactive, so codes don't appear in the App Switcher preview.

Open source under MIT. Only Apple frameworks (CryptoKit, WatchConnectivity, LocalAuthentication, AVFoundation, PhotosUI, CoreImage). RFC 6238 (TOTP) verified against the RFC test vectors. Requires iPhone iOS 17 or later and Apple Watch watchOS 11.6 or later.