Tokn - 2FA / MFA Authenticator

Tokn is a lightweight, privacy-first 2FA / MFA authenticator app for one-time passwords (OTP). Your codes stay on your device, encrypted. No accounts, no cloud sync, no analytics, no ads.

A simple, open-source TOTP / HOTP authenticator for people who do not want their second factor in someone else's cloud.

Looking for something in the spirit of Aegis or Ente Auth, or a fully offline alternative to Authy or Google Authenticator? Tokn covers the same ground, with local device-to-device sync on top.

WHY TOKN

- Private by design. No sign-up, no telemetry, and no Google Play Services on your device.
- Encrypted vault. Stored in an SQLCipher database, unlocked with biometrics (fingerprint or face) or a password.
- Works fully offline. Codes are generated locally on your phone.
- Open source. GPL-3.0, source available on GitHub, also published on F-Droid.
- Multiple devices? Sync your vault via Wi-Fi or a QR code.

FEATURES

- TOTP and HOTP support per RFC 6238 and RFC 4226
- SHA-1, SHA-256 and SHA-512
- Add accounts by scanning a QR code with the camera or from a gallery image
- Manual entry for codes you cannot scan
- Biometric unlock with password fallback
- Encrypted backup and restore for moving to a new phone or keeping a copy
- Device-to-device sync over local Wi-Fi, Wi-Fi Direct or animated QR code. Nothing leaves your network and the handshake is end-to-end encrypted
- Organize accounts with custom groups, multiple groups per account
- Custom icons and importable icon packs (Aegis-compatible)
- Material 3 Expressive design with light, dark or system theme and optional Material You colors
- Screenshot protection keeps codes out of the recents preview and blocks screen capture
- Audit log. Every vault unlock, account change, and settings tweak gets a timestamped entry you can search and filter.
- Recycle bin. Deleted accounts wait 30 days before permanent removal, or skip the wait and delete immediately. Configurable.

SWITCHING FROM ANOTHER 2FA APP

Tokn imports backups from Aegis, 2FAS, Google Authenticator and standard otpauth:// URIs. Bring your existing accounts over in minutes.

WORKS WITH

Any service that supports standard TOTP or HOTP two-factor authentication. Google, GitHub, GitLab, Microsoft, Amazon, Discord, Twitch, Reddit, Dropbox, Proton, and thousands more.

Whether you call it two-factor authentication, multi-factor authentication, 2FA, MFA, or one-time passwords (OTP), Tokn generates your verification codes securely and privately, with no account and no cloud.

All product names, logos and brands are property of their respective owners. References to other apps and services are nominative and do not imply any affiliation or endorsement.

LICENSE

Tokn is free software, released under the GNU General Public License v3.0 or later.

Website with comparisons and migration guides:
https://usetokn.app

Source code, releases and issue tracker:
https://github.com/tokn-authenticator/tokn