AuthWright

AuthWright makes the sign-in codes that Google, Microsoft, GitHub and most other sites ask for when two-step verification is on. It works with the same QR codes and setup keys as Google Authenticator. Adding accounts • Scan a setup QR code, choose a screenshot, paste a link or setup key, or type the key in. • Moving from Google Authenticator? Export your accounts there and scan the codes it shows. • Import an export from Aegis, 2FAS, Bitwarden, andOTP, FreeOTP+, Ente or Proton Authenticator — encrypted Aegis and 2FAS exports too. • Time-based, counter-based and Steam Guard codes; SHA-1, SHA-256 and SHA-512; 6 to 8 digits. Finding them • Search by service, account or group. • Favourites stay at the top; groups like Work and Personal filter the list. • Service logos so a long list reads at a glance — built in, never looked up online. • Codes in AutoFill: apps and websites that ask for a code get your matching accounts above the keyboard. • A home screen widget with your favourites' codes. With the lock on, a tap unlocks them for five minutes. • A Quick Settings tile opens AuthWright from anywhere. On your watch AuthWright for Wear OS puts your codes on your wrist, in the app or a swipe from the watch face, from the phone beside it. Your devices, not a server • Pair with AuthWright on your Mac, iPhone, iPad or another Android device, and your accounts stay in step over your own Wi-Fi. • There is no account to create and no cloud copy: secrets are kept in the Android Keystore and only ever travel to devices you paired. • A deletion on one device never removes an account from another on its own: you choose Keep or Remove. Security • Lock with your fingerprint, face or screen lock, and AuthWright locks again when you leave it. • Codes never appear in screenshots or the recent-apps view, and can be hidden until tapped. • Copied codes are marked sensitive and cleared from the clipboard after a delay you choose. • A warning if your phone's clock is far enough out to spoil codes. Backup and recovery • Export an encrypted backup, sealed with a passphrase only you know — with a reminder when some accounts aren't in one yet. • Keep each site's recovery codes with its account, encrypted and synced. • Transfer accounts to another authenticator app with standard transfer QR codes. No ads, no tracking, no data collected.