Tokn - MFA / 2FA authenticator

Tokn is a small, privacy-first 2FA / MFA authenticator. Your one-time codes stay on your device, encrypted. No accounts, no cloud sync, no analytics, no ads.

A simple, open-source TOTP / HOTP authenticator for people who do not want their second factor in someone else's cloud.

WHY TOKN

• Private by design. No sign-up, no telemetry, and no Google Play Services on your device.

• Encrypted vault. Stored in an SQLCipher database, unlocked with biometrics (fingerprint or face) or a password.

• Works fully offline. Codes are generated locally on your phone.

• Open source. GPL-3.0, source available on GitHub, also published on F-Droid.

FEATURES

• TOTP and HOTP support per RFC 6238 and RFC 4226

• SHA-1, SHA-256 and SHA-512

• Add accounts by scanning a QR code with the camera or from a gallery image

• Manual entry for codes you cannot scan

• Biometric unlock with password fallback

• Encrypted backup and restore for moving to a new phone or keeping a copy

• Device-to-device sync over local Wi-Fi, Wi-Fi Direct or animated QR code. Nothing leaves your network and the handshake is end-to-end encrypted

• Organize accounts with custom groups, multiple groups per account

• Recycle Bin that keeps deleted items optionally for 30d. Configurable

• Audit Log to see your vault actions

• Custom icons and importable icon packs (Aegis-compatible)

• Material 3 design with light, dark or system theme and optional Material You colors

• Screenshot protection keeps codes out of the recents preview and blocks screen capture

SWITCHING FROM ANOTHER 2FA APP

Tokn imports backups from Aegis, 2FAS, Google Authenticator and standard otpauth:// URIs. Bring your existing accounts over in minutes.

WORKS WITH

Any service that supports standard TOTP or HOTP two-factor authentication. Google, GitHub, GitLab, Microsoft, Amazon, Discord, Twitch, Reddit, Dropbox, Proton, and thousands more.