
authenticator app · Proton
Proton Authenticator
Free, open-source two-factor code app with end-to-end encrypted sync and apps for five systems.
In short
- The app is free on all platforms and works without a Proton Account1.
- Native apps cover Windows, macOS, Linux, iOS and Android2.
- Backups use a key derived from your password with Argon2, and synced codes are end-to-end encrypted3.
- Syncing between Windows, Linux and Android needs a Proton Account; Apple devices can use iCloud5,6.
- Proton says it plans independent audits but names no audit of this app yet3.
Proton Authenticator suits people who want codes on a phone and a desktop, with encrypted backup and no paid plan1,2,3. It imports from several rival apps and exports your codes1,7. The catch: Proton names no outside audit of this app yet, and Proton's pages do not mention passkeys, push approval or counter-based codes1,3.
Best for: People who want encrypted sync and a Windows or Linux app.
Where the points come from
Security and trust 27 of 37 points
| Rule | What is published | Points |
|---|---|---|
| End-to-end encrypted backup | YesBackups use a key derived from your password with Argon2; synced data is end-to-end encrypted with your key3. | 12 / 12 |
| Independent audit, 2023 or later | Not publishedNot published on the vendor's security-model and open-source pages3,10; Proton says audits will come. | 0 / 10 |
| Open-source apps | YesProton says the app is open source3; the iOS and Android repositories are listed under the GNU GPL v3.09. | 6 / 6 |
| Public bug bounty | YesProton says the app is eligible for its bug bounty programme3; the programme has its own page11. | 3 / 3 |
| App lock | YesLock the app with biometrics or a PIN, with an automatic lock timer4. | 6 / 6 |
Backup and recovery 35 of 35 points
| Rule | What is published | Points |
|---|---|---|
| Cloud backup or sync | YesBack up to iCloud on Apple devices or a chosen location on Android8; Proton Account sync also works6. | 10 / 10 |
| Same codes on several devices | YesSync between devices with a Proton Account, or iCloud on Apple devices6. | 7 / 7 |
| Export all accounts | YesThe app page says you can export your codes to a location of your choice1. | 7 / 7 |
| Import from other apps | YesImport guide covers CSV files, QR codes and exports from 2FAS, Aegis, Bitwarden Authenticator, Ente Auth, Google Authenticator and LastPass Authenticator7. | 6 / 6 |
| Works without an account | YesThe help centre says a Proton Account is not needed to use the app5. | 5 / 5 |
Systems 10 of 12 points
| Rule | What is published | Points |
|---|---|---|
| Apps | Windows, macOS, Linux, iOS, AndroidDownload page lists desktop apps for Windows, macOS and Linux, plus iOS and Android; no web app2. | 10 / 12 |
Features 3 of 12 points
| Rule | What is published | Points |
|---|---|---|
| Stores passkeys | Not publishedNot published on the vendor's app and help pages1,5. | 0 / 3 |
| Sign-in approval prompts | Not publishedNot published on the vendor's app and help pages1,5. | 0 / 3 |
| Counter-based (HOTP) codes | Not publishedNot published; the security-model page mentions only time-based codes3. | 0 / 3 |
| Folders, tags or search | YesThe app page says you can find accounts with search and custom icons1. | 3 / 3 |
Price 4 of 4 points
The rule behind each line: how we score authenticator apps.
Plans and prices
As the vendor lists them, before tax. Prices are in US dollars unless the plan shows euros; the points use US dollars, with euros converted at the ECB rate.
Strengths
- Free, with no ads or tracking claimed, and no account needed to use it1,5.
- Apps for Windows, macOS, Linux, iOS and Android2.
- Backups are encrypted with a key derived from your password3.
- Imports from 2FAS, Aegis, Bitwarden Authenticator, Ente Auth, Google Authenticator and LastPass Authenticator7.
- Biometric or PIN lock with an auto-lock timer4.
Concerns on record
- BleepingComputer reported on 4 August 2025 that the iOS app wrote full TOTP secrets to its local debug logs; Proton fixed it in version 1.1.1 and told the outlet the logs are local only and never sent to its server12.
Other authenticator apps
- 1
Ente AuthPeople who want encrypted sync, open source and a web view of their codes91/100$0cost with backup on two devices - 3
Zoho OneAuthPeople who want free encrypted backup and the same codes on a phone and a computer74/100$0cost with backup on two devices - 4
2FAS AuthiPhone and Android users who want a free app without an account73/100$0cost with backup on two devices - 5
StratumAndroid users who want an offline, open-source app they fully control60/100Not publishedcost with backup on two devices
Proton Authenticator vs Ente Auth · Proton Authenticator vs Zoho OneAuth · All 12 authenticator apps
Sources
- Proton Authenticator, Proton. Accessed 8 Oct 2026.
- Download Proton Authenticator, Proton. Accessed 8 Oct 2026.
- Proton Authenticator security model, Proton. Accessed 8 Oct 2026.
- Proton Authenticator security, Proton. Accessed 8 Oct 2026.
- Proton Authenticator FAQs, Proton. Accessed 8 Oct 2026.
- Sync your 2FA codes, Proton. Accessed 8 Oct 2026.
- Import 2FA codes, Proton. Accessed 8 Oct 2026.
- Back up 2FA codes, Proton. Accessed 8 Oct 2026.
- Proton Pass repositories, GitHub. Accessed 8 Oct 2026.
- Open source, Proton. Accessed 8 Oct 2026.
- Bug bounty programme, Proton. Accessed 8 Oct 2026.
- Proton fixes Authenticator bug leaking TOTP secrets in logs, BleepingComputer. Accessed 8 Oct 2026.
Website: proton.me/authenticator · Markdown version · We are not affiliated with Proton.