--- title: Ente Auth canonical: https://saasranked.com/software/ente-auth/ category: Authenticator Apps points: 91 rank: 1 of 12 facts_checked: 2026-10-08 --- # Ente Auth Free, open-source authenticator with end-to-end encrypted sync, a published outside audit and apps for five systems plus the web. 91 points out of 100. #1 of 12 authenticator apps. Vendor: Ente. Website: https://ente.com/auth/ - The app is free and open source under AGPL-3.0, and works without an account [1][3][7]. - Native apps cover Windows, macOS, Linux, iOS and Android, plus a web view at auth.ente.com [1][10]. - Codes you back up are end-to-end encrypted with a key only you hold [9]. - Cure53 audited the Ente apps, Auth included; Ente's write-up is dated 3 November 2025 and links the public report [6]. - App lock offers a device lock, a 4-digit PIN or a password [2]. Verdict: Ente Auth suits people who want free encrypted sync across phone, desktop and web, with open code and a recent public audit [1][6][9]. It imports from nine named apps and exports encrypted files [4][5]. The catch: Ente documents no public bug bounty, and its pages do not mention passkeys or push approval [1][11]. Best for: People who want encrypted sync, open source and a web view of their codes. ## Points | Criterion | Line | Value | Points | Note | |---|---|---|---|---| | Security and trust | End-to-end encrypted backup | Yes | 12/12 | The privacy page says 2FA secrets are end-to-end encrypted with a key that only you have [9]. | | Security and trust | Independent audit, 2023 or later | Yes | 10/10 | Cure53 audited Photos, Auth and Locker; Ente's article is dated 3 November 2025 and links the full report (file named Oct-2025) [6]. | | Security and trust | Open-source apps | Yes | 6/6 | The repository that holds the Auth apps is under AGPL-3.0 [7]. | | Security and trust | Public bug bounty | Not published | 0/3 | Not published; the vendor's security pages describe private vulnerability reports only [7][11]. | | Security and trust | App lock | Yes | 6/6 | Device lock, a 4-digit PIN or a password lock, with auto lock [2]. | | Backup and recovery | Cloud backup or sync | Yes | 10/10 | Auth provides end-to-end encrypted cloud backups [1]. | | Backup and recovery | Same codes on several devices | Yes | 7/7 | FAQ says you can use Auth on multiple devices and sync codes with end-to-end encryption [3]. | | Backup and recovery | Export all accounts | Yes | 7/7 | Encrypted JSON export through the Ente command-line tool; automatic daily local backups are also described [5]. | | Backup and recovery | Import from other apps | Yes | 6/6 | Imports from 2FAS, Aegis, andOTP, Bitwarden, Google Authenticator, LastPass, OTP Auth, Proton and Raivo OTP [4]. | | Backup and recovery | Works without an account | Yes | 5/5 | The FAQ says Ente Auth does not require an account [3]. | | Systems | Apps | Windows, macOS, Linux, iOS, Android, Web | 12/12 | Desktop app for Windows, Linux and macOS, mobile apps, and codes viewable at auth.ente.com [1][10]. | | Features | Stores passkeys | Not published | 0/3 | Not published on the vendor's app page and feature guide [1][2]. | | Features | Sign-in approval prompts | Not published | 0/3 | Not published on the vendor's app page and feature guide [1][2]. | | Features | Counter-based (HOTP) codes | Yes | 3/3 | The changelog (v4.4.23) refers to HOTP entries, so counter-based codes are supported [8]. | | Features | Folders, tags or search | Yes | 3/3 | Tags to organise and filter, plus search by issuer or account name [2]. | | Price | Cost with backup on two devices | $0 | 4/4 | Free; encrypted backup and multi-device sync need no paid plan [1][3][7]. | ## Plans | Plan | Price | Per month (USD) | |---|---|---| | Free | Free [1][3][7] | $0 | ## Strengths - Free with no stated limits, and usable without an account [1][3]. - Cure53 audit covers Auth, with the report published and Ente's write-up dated November 2025 [6]. - Apps for all five systems, plus a web view of your codes [1][10]. - Tags, search, pinning, and a PIN, password or device lock [2]. - Imports from nine named apps and exports encrypted files [4][5]. ## Limits - No public bug bounty is documented [11]. - The web app only shows codes; adding or managing codes needs the mobile or desktop app [10]. - The only documented export to Google Authenticator is an unencrypted HTML file of QR codes [3]. - Passkeys and push approval are not mentioned [1][2]. ## Vendor claims (not scored) - Ente says Auth is free and will remain free forever [7]. ## Sources 1. [Ente Auth](https://ente.com/auth/), Ente, accessed 2026-10-08 2. [Ente Auth features](https://ente.com/help/auth/features/), Ente, accessed 2026-10-08 3. [Ente Auth FAQ](https://ente.com/help/auth/faq/), Ente, accessed 2026-10-08 4. [Import codes](https://ente.com/help/auth/migration/import), Ente, accessed 2026-10-08 5. [Export codes](https://ente.com/help/auth/migration/export), Ente, accessed 2026-10-08 6. [Ente completes CERN sponsored audit](https://ente.com/blog/cern-audit/), Ente, accessed 2026-10-08 7. [ente-io/ente](https://github.com/ente-io/ente), GitHub, accessed 2026-10-08 8. [Ente Auth changelog](https://ente.com/help/auth/changelog), Ente, accessed 2026-10-08 9. [Ente Auth privacy disclosure](https://ente.com/help/auth/faq/privacy-disclosure/), Ente, accessed 2026-10-08 10. [Ente Auth README](https://github.com/ente-io/ente/tree/main/mobile/apps/auth), GitHub, accessed 2026-10-08 11. [Security and privacy FAQ](https://ente.com/help/photos/faq/security-and-privacy), Ente, accessed 2026-10-08