authenticator app · Red Hat

FreeOTP

Free, open-source code app for Android and iOS, sponsored by Red Hat.

46/100

#9 of 12 authenticator apps
Facts checked 8 Oct 2026

In short

The apps for Android and iOS are open source under Apache 2.0^3,4.
The iOS app is free and works in airplane mode⁵.
It supports counter-based HOTP as well as time-based TOTP codes^1,3.
Android backups go to your Google account or a file, encrypted with a master password you set².
iOS backups depend on Apple's encrypted device backups, and locked tokens are left out of them⁴.

FreeOTP suits people who want a simple open-source app on Android or iOS that supports HOTP and TOTP^1,3,4. Backup uses Google or Apple device backups, with encryption^2,4. The catch: its pages describe no export or import, no folders or search, and no audit or bug bounty, and F-Droid warns of backup problems⁶.

Best for: People who want a plain open-source app for HOTP and TOTP codes.

Where the points come from

Security and trust24 of 37

Backup and recovery15 of 35

Systems4 of 12

Features3 of 12

Price0 of 4

Security and trust 24 of 37 points

Rule	What is published	Points
End-to-end encrypted backup	YesAndroid backup is encrypted and restore asks for your master password; iOS needs encrypted device backups^2,4.	12 / 12
Independent audit, 2023 or later	Not publishedNot published on the vendor's site or repositories^1,3.	0 / 10
Open-source apps	YesAndroid and iOS repositories are licensed Apache-2.0^3,4.	6 / 6
Public bug bounty	Not publishedNot published on the vendor's site or repositories^1,3.	0 / 3
App lock	YesiOS tokens flagged as locked need biometrics; App Store notes Face ID unlock^4,5.	6 / 6

Backup and recovery 15 of 35 points

Rule	What is published	Points
Cloud backup or sync	YesAndroid can back up to a Google account; the iOS app lists encrypted backup to iCloud^2,5.	10 / 10
Same codes on several devices	Not publishedNot published on the vendor's pages^1,2,4.	0 / 7
Export all accounts	Not publishedNot published; only backup and restore are described^2,4.	0 / 7
Import from other apps	Not publishedNot published; only restore from a FreeOTP backup is described^2,4.	0 / 6
Works without an account	YesTokens are added by scanning a QR code; the privacy policy says no data is collected^1,7.	5 / 5

Systems 4 of 12 points

Rule	What is published	Points
Apps	iOS, AndroidAndroid app on Google Play and F-Droid; iOS app on the App Store^3,4,5.	4 / 12

Features 3 of 12 points

Rule	What is published	Points
Stores passkeys	Not publishedNot published on the vendor's pages or app listings^1,3,5.	0 / 3
Sign-in approval prompts	Not publishedNot published on the vendor's pages or app listings^1,3,5.	0 / 3
Counter-based (HOTP) codes	YesREADME says it implements HOTP (RFC 4226) and TOTP (RFC 6238)³.	3 / 3
Folders, tags or search	Not publishedNot published on the vendor's pages or app listings^1,3,5.	0 / 3

Price 0 of 4 points

Rule	What is published	Points
Cost with backup on two devices	Not publishedFree, but the same codes on two devices are not documented, so the rule's condition is not met^2,4.	0 / 4

The rule behind each line: how we score authenticator apps.

Plans and prices

As the vendor lists them, before tax. Prices are in US dollars unless the plan shows euros; the points use US dollars, with euros converted at the ECB rate.

Plan	Price as listed	Per month	Notes
Free1 person	Free^3,5	$0	iOS app is free on the App Store; Android app is open source under Apache 2.0

Strengths

Open source under Apache 2.0 on both Android and iOS^3,4.
Supports HOTP and TOTP³.
Android restore asks for the master password you set².
The apps collect no data from your device, says the privacy policy⁷.

Limits

F-Droid notes that users reported issues with backup and restore⁶.
iOS locked tokens are not included in device backups⁴.
Its pages describe no export or import to move to another app^2,3,4.
No audit or bug bounty is published^1,3.

Other authenticator apps

1
Ente AuthPeople who want encrypted sync, open source and a web view of their codes
91/100
$0cost with backup on two devices
2
Proton AuthenticatorPeople who want encrypted sync and a Windows or Linux app
79/100
$0cost with backup on two devices
3
Zoho OneAuthPeople who want free encrypted backup and the same codes on a phone and a computer
74/100
$0cost with backup on two devices
4
2FAS AuthiPhone and Android users who want a free app without an account
73/100
$0cost with backup on two devices

All 12 authenticator apps

Sources

FreeOTP, FreeOTP. Accessed 8 Oct 2026.
Backup and Restore, GitHub. Accessed 8 Oct 2026.
freeotp/freeotp-android, GitHub. Accessed 8 Oct 2026.
freeotp/freeotp-ios, GitHub. Accessed 8 Oct 2026.
FreeOTP Authenticator on the App Store, Apple App Store. Accessed 8 Oct 2026.
FreeOTP on F-Droid, F-Droid. Accessed 8 Oct 2026.
FreeOTP privacy policy, FreeOTP. Accessed 8 Oct 2026.

Website: freeotp.github.io · Markdown version · We are not affiliated with Red Hat.