Authly

Offline 2FA MFA TOTP authenticator with cloud backup.

Authly – Offline Authenticator

Authly is a fast, minimalist two-factor authentication (2FA) app that keeps your one-time passwords secure — even without an internet connection. Built for speed and privacy, Authly generates standard 6-digit TOTP codes that refresh every 30 seconds, compatible with Google, GitHub, Twitter, Dropbox, and thousands of other services.

🔒 Privacy First — No Account Required

Use Authly completely anonymously. Your 2FA secrets are encrypted and stored locally in your device's secure storage — never in plain text, never exposed. No sign-up needed to get started.

☁️ Optional Cloud Backup

Want to back up your tokens? Sign in with your email to enable encrypted cloud sync via Firebase. Your secrets are encrypted on your device before they ever reach the cloud — we never see your raw keys.

⚡ Key Features

Generate TOTP codes compatible with any authenticator-supporting service

Add tokens by scanning a QR code or entering a secret key manually

Biometric app lock — protect access with fingerprint or Face ID

Encrypted local storage using your device's secure enclave

Optional end-to-end encrypted cloud backup and restore

Dark mode (true pitch black) and clean white light mode

Smooth liquid glass UI with animated 30-second countdown timers

Works fully offline — no internet required for code generation

🎨 Beautiful by Design

Authly features a distinctive "liquid glass" interface — frosted glass cards, subtle animated gradients, and fluid transitions that make managing your 2FA tokens a pleasure, not a chore.

🛡️ Security Architecture

TOTP secrets are stored using flutter_secure_storage (device keychain/keystore)

Cloud sync uses AES-GCM client-side encryption — secrets are encrypted before upload

Firestore never holds plain-text 2FA secrets

Biometric unlock via device-native authentication

📋 Compatibility

Works with any service that supports the standard TOTP/HOTP protocol, including but not limited to: Google, GitHub, Microsoft, Dropbox, Amazon, Coinbase, Discord, and more.

Authly does not collect any personal data in local-only mode. Cloud sync requires an email address solely for account management. See our privacy policy for full details.