Comparison of OTP applications

From HandWiki

The following is a general comparison of OTP applications that are used to generate one-time passwords for two-factor authentication (2FA) systems using the time-based one-time password (TOTP) or the HMAC-based one-time password (HOTP) algorithms.

Authenticated implementations

Implementation Description Online sync. Operating system Non-default
Windows Mac Linux iOS Android Value length, d Hash, H Interval, TX Epoch, T0 Steam
Aegis Authenticator Free and open source app for Android to manage your 2-step verification tokens.[1] Automatic backup to a location of your choosing No No No No Yes Yes Yes Yes No Yes
Bitwarden Open Source Cross platform password manager. 2FA is a premium feature.[2] Yes Yes Yes Yes Yes Yes Yes Yes Yes Unknown Yes[3]
SAASPASS Authenticator [4] Cross-platform 2FA Authenticator with TOTP & HOTP generator with sharing capabilities and password manager integration. Multiple device support, Mobile app and web access with multiple backup capabilities. Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes
Google Authenticator Yes No No No Yes Yes No No No No No
Microsoft Authenticator Yes No No No Yes Yes No No No No No
1Password Cross-platform password manager[5] Yes Yes Yes Yes Yes Yes No Unknown Unknown Unknown Unknown
Authy By Twilio, from 2015, originally Authy.[6] Also available for Chrome. Yes Yes Yes Yes Yes Yes Yes No No No No
Enpass[7] Password manager by Sinew Software Systems. Syncs over multiple back-ends. Yes Yes Yes Yes Yes Yes Yes No Yes Unknown No
FreeOTP[8] Maintained by RedHat, and based on Google Authenticator. No No No No Yes Yes Yes Yes Yes No No
oathtool[9] Command-line tool for generating OTP tokens. No No No Yes No No Yes Yes Yes Yes Unknown
privacyIDEA Authenticator[10] For use with privacyIDEA Authentication Server, with a secure enrollment process. No No No No Yes Yes Yes Yes Yes No Unknown
andOTP[11] (unmaintained)[12] Open-source app for Android 4.4+. Compatible with Google Authenticator. No No No No No Yes No No Yes No No
Invantive Authenticator[13] Focuses on integration with Invantive Keychain. No Yes No No No No Yes Yes Yes Yes No
LastPass Authenticator[14] Cross-platform OTP for mobile devices with support for online backup. Yes No No No Yes Yes No No No No No
TOTP.APP[15] Web-based authenticator not requiring registration. No Yes Yes Yes Yes Yes No No No No No
Yubico Authenticator for Desktop[16] By Yubico, for use with Yubikeys. No Yes Yes Yes N/A N/A Yes Yes Yes No No
Yubico Authenticator for Mobile N/A N/A N/A Yes Yes
KeePassXC[17] Password manager Through user setup with Syncthing,[18] or only within the KeeWeb[19] online web App[20] Yes Yes Yes No KeePassDX[21] Yes Yes Yes No Yes
2FAS[22] Popular, feature rich open-source two-factor authenticator. No account required. Online backup/sync via iCloud or Google Drive Through browser extension connected to mobile app Yes Yes Yes Yes Yes No No
2FAuth[23] An open-source PHP web based self-hosted OTP generator, designed for both mobile and desktop. Yes, web based Yes Yes Yes No Yes

See also

References

  1. "Aegis Authenticator - Secure 2FA app for Android". https://getaegis.app/. 
  2. "Pricing for Individuals and Families | Bitwarden". https://bitwarden.com/pricing/. 
  3. "Steam Guard TOTPs". https://bitwarden.com/help/authenticator-keys/#steam-guard-totps. 
  4. "The 5 Best Two-Factor Authentication Apps for iPhone & Android". https://smartphones.gadgethacks.com/how-to/5-best-two-factor-authentication-apps-for-iphone-android-0186751/. 
  5. "Use 1Password as an authenticator for sites with two-factor authentication" (in en). https://support.1password.com/one-time-passwords/. 
  6. Lardinois, Frederic (2015-02-24). "Twilio Acquires Two-Factor Authentication Service Authy" (in en). TechCrunch. https://techcrunch.com/2015/02/24/twilio-acquires-two-factor-authentication-service-authy/. 
  7. "Best password manager for iOS, Android, Windows, Linux, Mac | Enpass" (in en). https://www.enpass.io/. 
  8. "FreeOTP". https://freeotp.github.io. 
  9. "OATH Toolkit". http://www.nongnu.org/oath-toolkit/. 
  10. "privacyIDEA Authenticator" (in en). https://github.com/privacyidea/privacyidea-authenticator/. 
  11. "andOTP/andOTP". https://github.com/andOTP/andOTP. 
  12. "[Unmaintained[App][4.4+][Open source] andOTP - Open source two-factor authentication for Android"]. https://forum.xda-developers.com/t/unmaintained-app-4-4-open-source-andotp-open-source-two-factor-authentication-for-android.3636993/page-6#post-87021655. 
  13. B.V., Invantive Software. "Invantive Authenticator" (in en). http://two-step-verification.solutions. 
  14. "LastPass - LastPass Authenticator" (in en). https://lastpass.com/auth/. 
  15. "Online one-time password generator / TOTP (Google Authenticator) Online" (in en). https://totp.app/. 
  16. "Using Your YubiKey with Authenticator Codes : Yubico Support". https://support.yubico.com/support/solutions/articles/15000006419-using-your-yubikey-with-authenticator-codes. 
  17. Team, KeePassXC. "KeePassXC 2.2.0 released - KeePassXC". https://keepassxc.org/blog/2017-06-26-2.2.0-released/. 
  18. "KeePassXC + KeePassDX (Android) Sync guide. A complete starting guide for new users.". https://reddit.com/r/KeePass/comments/plmgb6/keepassxc_keepassdx_android_sync_guide_a_complete/. 
  19. "Free Password Manager Compatible with KeePass: KeeWeb". https://keeweb.info. 
  20. "KeeWeb". https://app.keeweb.info. 
  21. "KeePassDX". https://www.keepassdx.com/. 
  22. "2FA Authenticator App (2FAS)". 2FAS. https://2fas.com/. 
  23. "GitHub - Bubka/2FAuth: A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes". Bubka. https://github.com/Bubka/2FAuth.