2FA Authenticator: OTP & Codes

Use private 2FA codes without creating an account or sending authenticator secrets to a cloud service.

2FA Authenticator: OTP App generates six-digit TOTP codes for services that support standard authenticator apps. Scan the QR code shown by a service, or enter its setup key manually when a camera is unavailable.

PRIVATE BY DESIGN
• No account required
• Authenticator setup keys stay on your device
• Vault data is encrypted with an Android Keystore-protected key
• Cloud backup and device-transfer backup are disabled
• Codes continue working offline

SIMPLE AUTHENTICATOR SETUP
• Scan standard otpauth TOTP QR codes
• Add Base32 setup keys manually
• Reject malformed, unsupported, and duplicate entries
• See the service and account beside every rotating code
• Hide, restore, or delete saved accounts

SECURITY-MINDED DETAILS
• Screen capture is blocked on sensitive app screens in release builds
• Copied codes and generated passwords clear from the clipboard after 60 seconds
• Camera permission is requested only when you choose QR scanning
• No microphone, contacts, location, notifications, or storage permission

PASSWORD GENERATOR
Create strong passwords using a cryptographically secure random generator. Choose length and character types, then copy or save the result in the encrypted local vault.

IMPORTANT
Before deleting the app or removing an authenticator, make sure you have recovery codes or another authenticator configured. Zoopet cannot recover setup keys because the vault is not uploaded to us.

The app supports standard time-based one-time password accounts. It does not support HOTP counter-based accounts or proprietary push-approval systems.

HOW TOTP WORKS
After you enable two-step verification on a compatible service, that service provides a QR code or Base32 setup key. Add it to the app once. Your phone and the service then calculate matching one-time codes from the shared setup key and current time. A new code appears automatically at regular intervals, so you do not need a mobile signal or internet connection to sign in.

MANUAL ENTRY WHEN QR IS NOT AVAILABLE
Some websites show a text setup key instead of a QR code. Enter the account name, service name, and Base32 secret directly. The app validates the information before saving it and prevents accidental duplicate entries. Secrets are treated as sensitive data and are stored only inside the encrypted local vault.

PRIVACY AND PERMISSIONS
The app works without registration, contact access, location, microphone, file access, or notification permission. Camera access has one purpose: reading the QR code you deliberately choose to scan. Denying camera permission does not block manual setup. Advertising may require an internet connection, but your TOTP generation remains local and offline.

SAFE USE TIPS
• Keep each service's recovery codes somewhere separate and secure
• Add this authenticator before removing your old authenticator
• Confirm a generated code works before closing a service's setup page
• Check that your device date and time are automatic if codes are rejected
• Remove an entry only after confirming you no longer need it

COMPATIBILITY
Use the app with services that display a standard otpauth TOTP QR code or Base32 secret. Code acceptance is controlled by the service you are signing in to. If a service requires its own approval notification, hardware key, SMS, passkey, or HOTP counter, follow that service's instructions because those methods are different from standard TOTP.

2FA Authenticator & OTP is designed as a focused, understandable tool: add compatible accounts, view rotating codes, create strong passwords, and keep sensitive material stored locally. Review the in-app privacy information at any time for details about storage, permissions, and advertising.

Recent changes:
Ad configuration updates.