iAuth

iAuth keeps your two-factor codes where they belong — on your device, encrypted, and never anywhere else. A modern authenticator for TOTP, HOTP, and Steam Guard. No account, no sign-in, no telemetry, no cloud sync — just the codes you need, generated locally, backed up only when you ask. Core features (free): • Time-based (TOTP), counter-based (HOTP), and Steam Guard codes • Scan QR codes from any service • Encrypted vault unlocked by a master password • PIN and biometric unlock — for speed, not for trust • Encrypted .iauth backup files you control • Import from Google Authenticator (single and multi-batch QR) • Import from 2FAS • Export to Google Authenticator • Privacy-first design — vault locked by default after every backgrounding iAuth Plus — $4.99 once, lifetime, no subscriptions: • Brand icons for 40 popular services, with monogram fallback for the rest • AMOLED-black theme and 6 accent presets (Bench Steel, Ember, Sage, Plum, Sun, Rose) • Pin accounts to the top of your list • Drag-to-reorder • Custom sort (manual, alphabetical, most recent) • Privacy mode (codes and labels hidden by default) • Folders to organise accounts (Personal, Work, or your own) Built on principles, not promises: • Encrypted at rest with AES-256-GCM • Master password hardened with Argon2id (OWASP profile #3) • Biometric and PIN wrap the same vault key — losing one never loses the vault • Clipboard auto-clears after copying a code • Screen-recording protection on sensitive views • No analytics SDK. No advertising. No third-party trackers. iAuth does one thing and does it well: it keeps your second factor safe and out of reach of anything that does not belong on your device. If you have outgrown the lack of backups in older authenticators, want a way out of cloud-locked services, or simply believe your authentication codes belong only to you — iAuth is for you. Privacy policy: https://khaledghallab.com/app-privacy-policy More apps by Khaled Ghallab: https://khaledghallab.com/en/apps