2fa APK

<p><b>Overview</b></p><p>2fa's only purpose is to provide single-use codes known as one-time passwords. It is a two-factor authenticator, and the concept is nothing new. There are plenty of other authenticators and alternatives with more features but with worse security and privacy than ours. We built 2fa to take full advantage of your device's hardware security, along with the latest cryptographic standards, to keep your accounts safe. The app is offline and includes unique features that no other authenticator app offers.</p><p><b>Features</b></p><ul><li>Support for <a href="https://en.wikipedia.org/wiki/Time-based_one-time_password" target="_blank" rel="noindex nofollow noopener">TOTP</a>, <a href="https://en.wikipedia.org/wiki/HMAC-based_one-time_password" target="_blank" rel="noindex nofollow noopener">HOTP</a>, and <a href="https://cs2central.gg/blog/steam-desktop-authenticator-guide" target="_blank" rel="noindex nofollow noopener">Steam Guard</a> codes via .maFile.</li><li>Add accounts via QR codes, OTPAuth links, files, or your gallery.</li><li>Highly customizable, with account colors and icon packs, including textured and tinted options.</li><li>Advanced security features such as biometric unlock, screen security, secure clipboard, lock on exit, and intent blocking.</li><li>Manual export and import of accounts in .2fa or Aegis .json encrypted formats.</li><li>And more!</li></ul><p><b>Security</b></p><p>All accounts are stored inside the app's internal directory using our format with the .2fa extension. They are encrypted with <a href="https://doc.libsodium.org/doc/secret-key_cryptography/aead/aegis-256" target="_blank" rel="noindex nofollow noopener">AEGIS-256</a> and the key used is derived from hashing your passphrase with <a href="https://veracrypt.io/en/Argon2id.html" target="_blank" rel="noindex nofollow noopener">Argon2id</a>. This method is used for both exports and internal storage, with the only difference being that internal storage takes an additional step by running the hash through <a href="https://en.wikipedia.org/wiki/HKDF" target="_blank" rel="noindex nofollow noopener">HKDF</a> using <a href="https://en.wikipedia.org/wiki/SHA-3" target="_blank" rel="noindex nofollow noopener">SHA3-512</a> with an additional random salt on every disk write.</p><p>If you choose to use biometrics, the passphrase hash must be stored. It's encrypted using the Android Keystore with <a href="https://en.wikipedia.org/wiki/Advanced_Encryption_Standard" target="_blank" rel="noindex nofollow noopener">AES-GCM</a> and <a href="https://en.wikipedia.org/wiki/Secure_element" target="_blank" rel="noindex nofollow noopener">StrongBox</a> (when available). The result is saved in the no_backup folder, in a file named unlock_passphrase_hash.bin, meaning it won't be included in system backups or when transferring to a new device. Also, the biometric key can become invalid due to several reasons. If this happens, decrypting won't be possible, and you will have to enter your passphrase, after which you will be prompted to confirm biometrics in order to re-establish them.</p><p><b>Translations</b></p><p>2fa is already available in several languages, and we would love your help adding more or improving the existing ones. You can do this by contributing to our <a href="https://translate.codeberg.org/projects/979/2fa" target="_blank" rel="noindex nofollow noopener">Codeberg Weblate</a>.</p><p><b>Support</b></p><p>If you have any problems using 2fa, find a bug, or just have a question, don't hesitate to reach out to us on <a href="https://discord.gg/zxgXNzhYJu" target="_blank" rel="noindex nofollow noopener">Discord</a>. If you would like to support and accelerate our work, please consider <a href="https://979.st/donate" target="_blank" rel="noindex nofollow noopener">donating</a>.</p>