Authenticator by Hottub

Authenticator by Hottub is a free two-factor authenticator for iPhone and Apple Watch. It makes the one-time codes that protect your accounts, keeps your setup keys encrypted on your iPhone, and moves with you through encrypted backups. No ads, no tracking, and no account required. ADD ANY ACCOUNT THAT SUPPORTS 2FA Turn on two-factor authentication for any website or app that offers an authenticator app, then scan its QR code or type its setup key. Authenticator by Hottub makes standard time-based one-time passwords (TOTP), the six- or eight-digit codes almost every service uses. MOVE FROM GOOGLE AUTHENTICATOR IN ONE SCAN Export your accounts from Google Authenticator, then scan the QR codes or pick the screenshots from your photo library. Large exports that span several QR codes are fine. You review every account on your iPhone before anything is added, and duplicates are skipped. FIND THE RIGHT CODE FAST Search by service, account or group, keep favorites at the top, and tap a code to copy it. A countdown shows when each code changes, and VoiceOver reads codes digit by digit. ENCRYPTED, AND HIDDEN WHEN IT SHOULD BE Setup keys live in an encrypted vault on your iPhone. Turn on app lock to require Face ID, Touch ID or your passcode. Codes stay hidden in the app switcher, during screen recording, mirroring and AirPlay. BACKUPS YOU CONTROL Make an encrypted backup locked with a passphrase only you know, and restore every account on a new iPhone in a minute. Hottub can never open it. Encrypted cloud backup is optional when you connect a Hottub account. APPROVE SIGN-INS WITH NUMBER MATCHING Connect a Hottub account and approve Hottub sign-ins from your phone or Apple Watch. To approve, tap the number shown on the screen you're signing in on; a wrong number blocks the sign-in. Approving needs Face ID, Touch ID or your passcode. Deny is always one tap, and "This wasn't me" reports a sign-in you didn't start. WORKS WITH THE SERVICES YOU USE Any service that offers "authenticator app" sign-in works, including Google, Microsoft, Proton, Amazon, GitHub, Dropbox, Discord, Reddit, Instagram, Facebook, X, Slack, Coinbase, Binance and your company's single sign-on. SHA-1, SHA-256 and SHA-512 codes and 30- or 60-second periods are supported. APPLE WATCH The Apple Watch companion shows Hottub sign-in requests and lets you approve one by tapping the matching number, or deny it, right from your wrist. Setup keys, codes and backups never leave your iPhone. HOTTUB DEVICES If you own supported Hottub devices, Authenticator by Hottub shows the exact operation, the devices it targets and when it expires before you confirm it with Face ID, Touch ID or your passcode. Your confirmation covers that one request only; safety checks stay on the device. PRIVATE BY DESIGN The authenticator works signed out and offline. Your setup keys are never uploaded unless you turn on encrypted cloud backup, and Hottub cannot read them even then. WHAT YOU GET - TOTP codes for any service that supports authenticator apps - QR scanner, setup-key entry, and Google Authenticator import from camera or screenshots - Search, favorites, groups, countdowns and tap-to-copy - Encrypted vault with optional Face ID, Touch ID or passcode lock - Codes hidden from screen recording, mirroring and the app switcher - Encrypted backup and restore to a new iPhone, locked by your passphrase - Optional Hottub sign-in approvals with number matching, on iPhone and Apple Watch - Owner confirmation for supported Hottub devices, with the exact operation shown before you approve - Free, with no ads and no tracking GOOD TO KNOW - Codes depend on your iPhone's clock. Keep "Set Automatically" on in Settings > General > Date & Time. - Turn on app lock if anyone else ever uses your iPhone. - Write down your backup passphrase. Nobody, including Hottub, can recover it. - Keep your services' recovery codes somewhere safe, as you would with any authenticator.