Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

(Standalone) applications for verification codes (TOTP)

...

Image RemovedImage Added

Aegis Authenticator (Android) Image Removed

Image Added

Raivo Authenticator (iOS)

Image Added

2FAS Authenticator (Android)

Image Removed

Raivo Authenticator (obrazek-20240503-140713.pngImage Added Bitwarden Authenticator (Android, iOS)

...

Image Added

Dashlane Authenticator (Android, iOS)

Image RemovedImage Added

ESET Secure Authentication (Android, iOS)

Image RemovedImage Added

FreeOTP Authenticator (Android, iOS)

Image RemovedImage Added

Google Authenticator (Android, iOS)

Image RemovedImage Added

Microsoft Authenticator (Android, iOS)

Image RemovedImage Added

2fast – Two Factor Authenticator (Windows)

image-20240516-101422.pngImage Added Tauthy (Windows, MacOS, Linux)

Note

In case you decide to use a cloud synchronization feature of your authenticator, you must protect your cloud synchronization account with another form of MFA, like a security key.

If you synchronize your TOTP codes into an account protected only by a password (for example Google), an attacker which steals your password will also get access to your TOTP codes, and therefore all your MFA protected accounts (like in this breach).

...

Password managers

Some password managers include an authentication feature, so you can use them for the verification codes (TOTP). This is a list of such verified password managers:

Image RemovedImage Added

KeepassXC (Windows, macOS, Linux, browser add-ons)

Image RemovedImage Added Keepass2Android Password Safe (Android)

Image Added

Bitwarden (paid version only; Android, iOS, browser add-ons)

Image RemovedImage Added

Apple Keychain (iOS, iPadOS, macOS)

Image RemovedImage Added

Dashlane Password Manager (Android, iOS, browser add-ons)

Image Removed

Keepass2Android Password Safe (Android)

Image Removed

Image Added

1password (Android, iOS, browser add-ons)

Image RemovedImage Added

Proton Pass - Password Manager (Android, iOS, browser add-ons)

Note

In order to keep your TOTP codes safe, you must protect your cloud-based password manager account with another form of MFA, like a security key.

If you synchronize your TOTP codes into an account protected only by a password, an attacker which steals your password will also get access to your TOTP codes, and therefore all your MFA protected accounts.