Privault: 2FA Authenticator

Privault is an offline, privacy-first two-factor authentication (2FA) code generator — TOTP and HOTP, entirely on your device, with no account, no cloud sync, and no network access of any kind. WHY PRIVAULT Most authenticator apps quietly ask you to trust a server somewhere. Privault doesn't have one. Every secret, every code, every backup lives only on your phone, encrypted at rest, and nothing ever leaves the device unless you explicitly export it yourself. KEY FEATURES • TOTP (RFC 6238) and HOTP (RFC 4226) — standards-compliant, tested against the official reference vectors • SHA-1, SHA-256, SHA-512, with 6- or 8-digit codes, fully configurable per account • Add accounts by scanning a QR code or typing an otpauth:// secret manually • Organize hundreds of accounts with groups, free-form tags, and instant search (try issuer:, tag:, or group: filters) • Deterministic monogram icons so accounts are recognizable at a glance • One-tap copy, with a live countdown ring for TOTP and an explicit "next code" action for HOTP • Encrypted, passphrase-protected backup file for moving to a new device — protected by a fresh biometric check before export SECURITY, BUILT IN • Your vault is encrypted with AES-256-GCM using a key generated and held in the Android Keystore — the key itself never leaves secure hardware • App-lock with a 6-digit PIN, required on launch and after the device has been idle • Optional fingerprint / face unlock as a shortcut for the PIN • No analytics, no trackers, no network permission used for anything but the camera-based QR scanner WHAT PRIVAULT DOESN'T DO No cloud backup, no account recovery service, no ads, no data collection. If you lose your PIN and don't have a backup file, your codes are gone — that's the deliberate trade-off of an app that never phones home. Available in 20 languages. Privault is built for people who want their second factor to be exactly that — a second, independent factor that isn't itself sitting on someone else's server.