--- title: FreeOTP canonical: https://saasranked.com/software/freeotp/ category: Authenticator Apps points: 46 rank: 9 of 12 facts_checked: 2026-10-08 --- # FreeOTP Free, open-source code app for Android and iOS, sponsored by Red Hat. 46 points out of 100. #9 of 12 authenticator apps. Vendor: Red Hat. Website: https://freeotp.github.io/ - The apps for Android and iOS are open source under Apache 2.0 [3][4]. - The iOS app is free and works in airplane mode [5]. - It supports counter-based HOTP as well as time-based TOTP codes [1][3]. - Android backups go to your Google account or a file, encrypted with a master password you set [2]. - iOS backups depend on Apple's encrypted device backups, and locked tokens are left out of them [4]. Verdict: FreeOTP suits people who want a simple open-source app on Android or iOS that supports HOTP and TOTP [1][3][4]. Backup uses Google or Apple device backups, with encryption [2][4]. The catch: its pages describe no export or import, no folders or search, and no audit or bug bounty, and F-Droid warns of backup problems [6]. Best for: People who want a plain open-source app for HOTP and TOTP codes. ## Points | Criterion | Line | Value | Points | Note | |---|---|---|---|---| | Security and trust | End-to-end encrypted backup | Yes | 12/12 | Android backup is encrypted and restore asks for your master password; iOS needs encrypted device backups [2][4]. | | Security and trust | Independent audit, 2023 or later | Not published | 0/10 | Not published on the vendor's site or repositories [1][3]. | | Security and trust | Open-source apps | Yes | 6/6 | Android and iOS repositories are licensed Apache-2.0 [3][4]. | | Security and trust | Public bug bounty | Not published | 0/3 | Not published on the vendor's site or repositories [1][3]. | | Security and trust | App lock | Yes | 6/6 | iOS tokens flagged as locked need biometrics; App Store notes Face ID unlock [4][5]. | | Backup and recovery | Cloud backup or sync | Yes | 10/10 | Android can back up to a Google account; the iOS app lists encrypted backup to iCloud [2][5]. | | Backup and recovery | Same codes on several devices | Not published | 0/7 | Not published on the vendor's pages [1][2][4]. | | Backup and recovery | Export all accounts | Not published | 0/7 | Not published; only backup and restore are described [2][4]. | | Backup and recovery | Import from other apps | Not published | 0/6 | Not published; only restore from a FreeOTP backup is described [2][4]. | | Backup and recovery | Works without an account | Yes | 5/5 | Tokens are added by scanning a QR code; the privacy policy says no data is collected [1][7]. | | Systems | Apps | iOS, Android | 4/12 | Android app on Google Play and F-Droid; iOS app on the App Store [3][4][5]. | | Features | Stores passkeys | Not published | 0/3 | Not published on the vendor's pages or app listings [1][3][5]. | | Features | Sign-in approval prompts | Not published | 0/3 | Not published on the vendor's pages or app listings [1][3][5]. | | Features | Counter-based (HOTP) codes | Yes | 3/3 | README says it implements HOTP (RFC 4226) and TOTP (RFC 6238) [3]. | | Features | Folders, tags or search | Not published | 0/3 | Not published on the vendor's pages or app listings [1][3][5]. | | Price | Cost with backup on two devices | Not published | 0/4 | Free, but the same codes on two devices are not documented, so the rule's condition is not met [2][4]. | ## Plans | Plan | Price | Per month (USD) | |---|---|---| | Free | Free [3][5] | $0 | ## Strengths - Open source under Apache 2.0 on both Android and iOS [3][4]. - Supports HOTP and TOTP [3]. - Android restore asks for the master password you set [2]. - The apps collect no data from your device, says the privacy policy [7]. ## Limits - F-Droid notes that users reported issues with backup and restore [6]. - iOS locked tokens are not included in device backups [4]. - Its pages describe no export or import to move to another app [2][3][4]. - No audit or bug bounty is published [1][3]. ## Sources 1. [FreeOTP](https://freeotp.github.io/), FreeOTP, accessed 2026-10-08 2. [Backup and Restore](https://github.com/freeotp/freeotp-android/blob/master/BACKUP.md), GitHub, accessed 2026-10-08 3. [freeotp/freeotp-android](https://github.com/freeotp/freeotp-android), GitHub, accessed 2026-10-08 4. [freeotp/freeotp-ios](https://github.com/freeotp/freeotp-ios), GitHub, accessed 2026-10-08 5. [FreeOTP Authenticator on the App Store](https://apps.apple.com/app/freeotp-authenticator/id872559395), Apple App Store, accessed 2026-10-08 6. [FreeOTP on F-Droid](https://f-droid.org/packages/org.fedorahosted.freeotp/), F-Droid, accessed 2026-10-08 7. [FreeOTP privacy policy](https://freeotp.github.io/privacy.html), FreeOTP, accessed 2026-10-08