Aegis Authenticator is a free open-source two-factor authentication app for Android that stores one-time codes in an encrypted vault on the phone itself. It is built for Android owners who want their two-factor codes under their own control, working fully offline with no account.[1]
Quick verdict
Android owners who want their two-factor codes under their own control will get the most from Aegis Authenticator. Its vault keeps TOTP and HOTP tokens encrypted on the device with AES-256-GCM, opens with a password or biometrics, and works fully offline with no account. The price of that control is platform lock-in and manual backups, so anyone on iPhones or anyone who needs effortless cloud sync across devices should choose a cloud authenticator instead. If you run Android and can keep backup files safe, choose Aegis; if your codes must follow you across platforms by themselves, choose a synced service.[1][2]
Key features
AES-256-GCM encrypted on-device vault: tokens live in an encrypted store on the phone, and the project states it collects no data and needs no account, phone number, or cloud service.[1][2]
Password plus biometric unlock: a password guards the vault while fingerprint or face verification, backed by the Android Keystore, covers everyday opening.[1][2]
TOTP and HOTP with broad compatibility: standard time- and counter-based tokens work out of the box, and Steam and Yandex entries are supported alongside mainstream codes.[1][2]
Fully offline with minimal permissions: code generation needs no connection, and the app requests only a small permission set, which suits air-gapped and privacy-hardened phones.[1]
Importer covering every major leaver path: direct imports take entries from Google Authenticator, Microsoft Authenticator, Authy, FreeOTP, 2FAS Authenticator, andOTP, and several others.[1][2]
Encrypted or plaintext export: the whole vault exports in encrypted form for safe moves or in plaintext for migrations where you accept the exposure.[1][2]
Automatic encrypted backups: scheduled backups write to a folder of your choice, including cloud folders exposed through the Android Storage Access Framework.[1][2]
Organized vault with Material You themes: groups, custom sorting, custom icons, search, and light, dark, and AMOLED themes keep large token collections usable.[1]
Who will love it
Android users leaving cloud authenticators: importers cover the major leaver paths, and tokens move from someone else's cloud into your own encrypted vault.[1][2]
Privacy-minded owners keeping codes on-device: offline generation, minimal permissions, no account, and no data collection keep the second factor off third-party servers.[1]
Custom-ROM and F-Droid users: distribution through both Google Play and F-Droid, with donations instead of ads or paid tiers, fits de-Googled setups.[1][2]
Who should avoid it
iPhone owners and mixed-device households: there is no iOS port planned, so codes cannot live natively on Apple devices.[1]
People who need effortless multi-device sync: with no account-based sync of its own, every additional device depends on backup files carried by the user.[1]
Teams needing shared vaults and recovery: Aegis is personal software with no shared collections, admin controls, or assisted account recovery.[1]
Alternatives and compatibility
Cloud authenticators in the Google, Microsoft, and Authy style remain the right choice when cross-platform sync and zero-maintenance recovery carry the workflow.[1]
The catalogue records 2FAS as an incumbent edge for Aegis, but its canonical page is unverified in this pass, so no alternatives links are proposed in this revision.[1]
Migration in is supported through the importer set, and migration risk concentrates in one operational fact: backups are files you must keep, since no vendor holds a recovery copy.[1][2]
Questions worth asking
What is the best Aegis Authenticator alternative for non-technical users?
A cloud authenticator with account sync is the safer pick when codes must follow you across phones and platforms with no backup files to manage. Aegis needs no code for daily use, but its backup files and Android-only scope assume deliberate ownership.[1]
Is Aegis Authenticator really no-code?
How much does Aegis Authenticator cost per month?
Can you self-host Aegis Authenticator?
Sources and editorial review
Source research. Reviewed on October 7, 2026. Written by Sanjib Sah. AI assisted; reviewed by a human editor.
We have not run or tested this product.
- Aegis Authenticator
official · Observed October 7, 2026
Official site; encryption, offline scope, import/export, Android-only stance
- beemdevelopment/Aegis
official · Observed October 7, 2026
Official repo README; token standards, Keystore biometrics, importers, GPL-3.0, donations
Compared with these products
No explicit proprietary baseline is recorded.