MirrorNest

Pocket2FA

Secure 2FA code client of 2FAuth server that works offline

AndroidSecurity & PrivacyOpen source

v0.9.18

25.8 MBscanned clean· 1 download

Verify your download

Select the file you downloaded to check it against the hash we published — the check runs in your browser, nothing is uploaded.

Screenshots

About

Pocket2FA is an open-source Android companion for the self-hosted 2FAuth web application. It provides a native mobile way to access accounts managed through a user’s own 2FAuth server. It is listed in the Security & Privacy category and is not intended to operate as a standalone two-factor authentication manager.

The application generates TOTP and Steam one-time passwords locally on the Android device. It synchronizes with a user’s own 2FAuth server while keeping the secrets on the device for local code generation. A real-time refresh view and countdown timer show when the current code is about to change.

Pocket2FA stores data with Android platform security through the Android Keystore. Users can optionally protect access with biometric authentication, including fingerprint or face recognition where supported by the device. Privacy mode hides codes by default, while a long press reveals them, and one tap copies a code to the clipboard.

Accounts can be arranged into groups for easier browsing, with support for service icons and QR code scanning from the camera or a gallery image. The app can work with multiple 2FAuth servers, allowing users to connect more than one self-hosted instance. MirrorNest mirrors the official Android build directly on its own storage and scans it for malware before publishing, providing a catalog distribution of this open-source security application.

Requires Android 7.0+

What's new in v0.9.18

Version 0.9.18

  • Group filter no longer resets to "All" after syncing with server
  • Updated Flutter SDK to 3.44.4
  • Upgraded dependencies: flutter_secure_storage, share_plus, and image_picker_android
  • Android build tools updated (Gradle 8.14, AGP 8.11.1)

App permissions

Read straight from this app's own installer file — the real access it declares it can request, not a guess.

  • Take pictures and record video
  • Read files on your device
  • Record audio
  • Modify or delete files on your device
  • Full network access
  • Use fingerprint/face unlock to authenticate
  • Use fingerprint to authenticate
  • net.gmartin.pocket2fa.dynamic Receiver Not Exported Permission

Does this still work for you?

Works (0)Doesn't work (0)Sign in to vote

Reviews

No reviews yet — be the first.

Leave a review

Sign in to post as a verified member instead of anonymously.

More in Security & Privacy