Tokn

Tokn is a small, privacy-first 2FA / MFA authenticator. Your one-time codes stay on your device, encrypted. No accounts, no cloud sync, no analytics, no ads.

A simple, open-source TOTP / HOTP authenticator for people who do not want their second factor in someone else's cloud.

WHY TOKN

• Private by design. No sign-up, no telemetry, and no Google Play Services on your device. • Encrypted vault. Stored in an SQLCipher database, unlocked with biometrics (fingerprint or face) or a password. • Works fully offline. Codes are generated locally on your phone. • Open source. GPL-3.0, source available on GitHub, also published on F-Droid.

FEATURES

• TOTP and HOTP support per RFC 6238 and RFC 4226 • SHA-1, SHA-256 and SHA-512 • Add accounts by scanning a QR code with the camera or from a gallery image • Manual entry for codes you cannot scan • Biometric unlock with password fallback • Encrypted backup and restore for moving to a new phone or keeping a copy • Device-to-device sync over local Wi-Fi, Wi-Fi Direct or animated QR code. Nothing leaves your network and the handshake is end-to-end encrypted • Organize accounts with custom groups, multiple groups per account • Custom icons and importable icon packs (Aegis-compatible) • Material 3 design with light, dark or system theme and optional Material You colors • Screenshot protection keeps codes out of the recents preview and blocks screen capture

SWITCHING FROM ANOTHER 2FA APP

Tokn imports backups from Aegis, 2FAS, Google Authenticator and standard otpauth:// URIs. Bring your existing accounts over in minutes.

WORKS WITH

Any service that supports standard TOTP or HOTP two-factor authentication. Google, GitHub, GitLab, Microsoft, Amazon, Discord, Twitch, Reddit, Dropbox, Proton, and thousands more.