
Pocket2FA
Secure 2FA code client of 2FAuth server that works offline
v0.9.18
25.8 MBscanned clean· 1 download
Verify your download
Select the file you downloaded to check it against the hash we published — the check runs in your browser, nothing is uploaded.
Screenshots
About
Pocket2FA is an open-source Android companion for the self-hosted 2FAuth web application. It provides a native mobile way to access accounts managed through a user’s own 2FAuth server. It is listed in the Security & Privacy category and is not intended to operate as a standalone two-factor authentication manager.
The application generates TOTP and Steam one-time passwords locally on the Android device. It synchronizes with a user’s own 2FAuth server while keeping the secrets on the device for local code generation. A real-time refresh view and countdown timer show when the current code is about to change.
Pocket2FA stores data with Android platform security through the Android Keystore. Users can optionally protect access with biometric authentication, including fingerprint or face recognition where supported by the device. Privacy mode hides codes by default, while a long press reveals them, and one tap copies a code to the clipboard.
Accounts can be arranged into groups for easier browsing, with support for service icons and QR code scanning from the camera or a gallery image. The app can work with multiple 2FAuth servers, allowing users to connect more than one self-hosted instance. MirrorNest mirrors the official Android build directly on its own storage and scans it for malware before publishing, providing a catalog distribution of this open-source security application.
Requires Android 7.0+
What's new in v0.9.18
Version 0.9.18
- Group filter no longer resets to "All" after syncing with server
- Updated Flutter SDK to 3.44.4
- Upgraded dependencies: flutter_secure_storage, share_plus, and image_picker_android
- Android build tools updated (Gradle 8.14, AGP 8.11.1)
App permissions
Read straight from this app's own installer file — the real access it declares it can request, not a guess.
- Take pictures and record video
- Read files on your device
- Record audio
- Modify or delete files on your device
- Full network access
- Use fingerprint/face unlock to authenticate
- Use fingerprint to authenticate
- net.gmartin.pocket2fa.dynamic Receiver Not Exported Permission
Does this still work for you?
Reviews
No reviews yet — be the first.
More in Security & Privacy
sub rosa by naiveHA
Program the static password and/or OpenPGP keys to your hardware security key
SeekPrivacy
Activist-Grade Defense Against System-Level Data Surveillance
Picocrypt-NG
Paranoid, offline file encryption with XChaCha20 and Argon2id.
Cryptographic ID
Attest the trustworthiness of a device using asymmetric cryptography
Keep: FROST Nostr Signer
FROST threshold signer and Nostr event signer for Android
Oversec
Privacy for All Apps! Encrypt and Disguise Messages in All Your Apps!