authenticator app · Bitwarden, Inc.

Bitwarden Authenticator

Free open-source iOS and Android app for two-factor codes that works without a Bitwarden account.

54/100

#6 of 12 authenticator apps
Facts checked 8 Oct 2026

In short

The app is free on iOS and Android and works without a Bitwarden account^1,2.
Backup relies on the phone's cloud backup, such as iCloud Backup or Google One; codes are not synced to Bitwarden servers².
Unit 42 (2025) and Mandiant (2024) audited the Bitwarden mobile apps and the mobile Authenticator app; reports are published⁵.
Source code is public under GPL-3.0 on GitHub^6,7.
Import accepts Google Authenticator, 2FAS, Aegis and LastPass; export gives JSON or CSV³.

Bitwarden Authenticator suits phone users who want a free app from a vendor that publishes mobile audit reports^1,5. It needs no account and imports from several other apps^2,3. The catch: backup depends on the phone's own cloud backup, there is no desktop app, and its bug bounty is private^2,5.

Best for: Phone users who want a free, audited, open-source code app with no sign-up.

Where the points come from

Security and trust22 of 37

Backup and recovery28 of 35

Systems4 of 12

Features0 of 12

Price0 of 4

Security and trust 22 of 37 points

Rule	What is published	Points
End-to-end encrypted backup	Not publishedNot published; the help page names device cloud backup and describes no key only you hold².	0 / 12
Independent audit, 2023 or later	YesUnit 42 (2025) and Mandiant (2024) audited the mobile authenticator apps; reports are linked⁵.	10 / 10
Open-source apps	YesAndroid and iOS repositories carry the Authenticator app under GPL-3.0^1,6,7.	6 / 6
Public bug bounty	NoBitwarden describes its HackerOne bug bounty as private⁵.	0 / 3
App lock	YesHelp page says you can set up biometric login to protect the app².	6 / 6

Backup and recovery 28 of 35 points

Rule	What is published	Points
Cloud backup or sync	YesData is backed up by the device's cloud backup, for example iCloud Backup or Google One. Counted as cloud backup².	10 / 10
Same codes on several devices	Not publishedNot published; the help page covers only moving codes to a new device^2,4.	0 / 7
Export all accounts	YesLocal Authenticator data exports as JSON or CSV³.	7 / 7
Import from other apps	YesImports from Google Authenticator, LastPass, 2FAS, Aegis, Raivo and Bitwarden exports³.	6 / 6
Works without an account	YesAvailable with or without a Bitwarden Password Manager account².	5 / 5

Systems 4 of 12 points

Rule	What is published	Points
Apps	iOS, AndroidHelp page says it is available on iOS and Android; mobile only^1,2.	4 / 12

Features 0 of 12 points

Rule	What is published	Points
Stores passkeys	Not publishedNot published on the Authenticator product or help pages^1,2.	0 / 3
Sign-in approval prompts	Not publishedNot published on the Authenticator product or help pages^1,2.	0 / 3
Counter-based (HOTP) codes	Not publishedNot published; the pages describe only time-based codes^1,2.	0 / 3
Folders, tags or search	Not publishedNot published; the help page mentions only marking favourites, not folders, tags or search².	0 / 3

Price 0 of 4 points

Rule	What is published	Points
Cost with backup on two devices	Not publishedFree, but no page documents the same codes on two devices, so the condition is not met^2,4.	0 / 4

The rule behind each line: how we score authenticator apps.

Plans and prices

As the vendor lists them, before tax. Prices are in US dollars unless the plan shows euros; the points use US dollars, with euros converted at the ECB rate.

Plan	Price as listed	Per month	Notes
Free1 person	Free¹	$0	The whole app is free

Strengths

Free, and usable without a Bitwarden account^1,2.
Two outside audits of the authenticator apps, 2024 and 2025, with published reports⁵.
Source code is public under GPL-3.0^6,7.
Imports from Google Authenticator, 2FAS, Aegis, LastPass and Raivo³.

Limits

Mobile only: iOS and Android, no desktop app².
Backup is left to the device's cloud backup; the page does not describe a key only you hold².
Bitwarden calls its HackerOne bug bounty private⁵.
Local codes sit in an unencrypted local database on the device².

Other authenticator apps

1
Ente AuthPeople who want encrypted sync, open source and a web view of their codes
91/100
$0cost with backup on two devices
2
Proton AuthenticatorPeople who want encrypted sync and a Windows or Linux app
79/100
$0cost with backup on two devices
3
Zoho OneAuthPeople who want free encrypted backup and the same codes on a phone and a computer
74/100
$0cost with backup on two devices
4
2FAS AuthiPhone and Android users who want a free app without an account
73/100
$0cost with backup on two devices

All 12 authenticator apps

Sources

Bitwarden Authenticator, Bitwarden. Accessed 8 Oct 2026.
Bitwarden Authenticator help, Bitwarden. Accessed 8 Oct 2026.
Import and export Authenticator data, Bitwarden. Accessed 8 Oct 2026.
Sync verification codes, Bitwarden. Accessed 8 Oct 2026.
Is Bitwarden audited?, Bitwarden. Accessed 8 Oct 2026.
bitwarden/android, GitHub. Accessed 8 Oct 2026.
bitwarden/ios, GitHub. Accessed 8 Oct 2026.

Website: bitwarden.com/products/authenticator · Markdown version · We are not affiliated with Bitwarden, Inc..