--- title: Zoho OneAuth canonical: https://saasranked.com/software/zoho-oneauth/ category: Authenticator Apps points: 74 rank: 3 of 12 facts_checked: 2026-10-08 --- # Zoho OneAuth Free two-factor code app for Windows, macOS, iOS and Android with passphrase-encrypted cloud backup. 74 points out of 100. #3 of 12 authenticator apps. Vendor: Zoho Corporation. Website: https://www.zoho.com/accounts/oneauth/ - The app is free across platforms [1]. - Apps exist for iOS, Android, Windows and macOS [1][4][8]. - Codes back up to the Zoho cloud, encrypted with a passphrase that Zoho does not store [2]. - Guest mode works without signing in, but guest codes are not backed up or synced [6]. - Google Authenticator accounts import by QR code; export gives QR codes, JSON or text [7][8]. Verdict: OneAuth suits people who want free encrypted backup and syncing across a phone and a computer [1][2][4]. It also offers folders, push sign-in approval and an app lock [1][4][5]. The catch: backup needs a Zoho account, and its pages publish no outside audit, source code or counter-based code support [1][2][6][9]. Best for: People who want free encrypted backup and the same codes on a phone and a computer. ## Points | Criterion | Line | Value | Points | Note | |---|---|---|---|---| | Security and trust | End-to-end encrypted backup | Yes | 12/12 | 2FA secrets are encrypted with your passphrase before upload; Zoho stores only the encrypted data, not the passphrase [2]. | | Security and trust | Independent audit, 2023 or later | Not published | 0/10 | Not published; Zoho's security page names no outside firm or report for this app [9]. | | Security and trust | Open-source apps | Not published | 0/6 | Not published on the OneAuth page or its help articles [1][2]. | | Security and trust | Public bug bounty | Yes | 3/3 | Zoho's bug bounty is open to individuals and covers all Zoho products listed on zoho.com; OneAuth is not named [10]. | | Security and trust | App lock | Yes | 6/6 | OneAuth page describes an app lock that unlocks with biometrics only [1]. | | Backup and recovery | Cloud backup or sync | Yes | 10/10 | Encrypted backups are stored in the Zoho cloud and restored on a new device with the passphrase [2][3]. | | Backup and recovery | Same codes on several devices | Yes | 7/7 | Zoho says OneAuth syncs OTP secrets across your devices [3][4]. | | Backup and recovery | Export all accounts | Yes | 7/7 | Select accounts to export by QR code, or as a JSON or text file; JSON can use a password [7]. | | Backup and recovery | Import from other apps | Yes | 6/6 | Imports from Google Authenticator by QR code, and from OneAuth exports [7][8]. | | Backup and recovery | Works without an account | Yes | 5/5 | Choosing Continue as Guest adds accounts with no sign-in; they are not backed up [6]. | | Systems | Apps | Windows, macOS, iOS, Android | 8/12 | Microsoft Store, App Store and Google Play links; help says Android, iOS, Windows and macOS [1][4][8]. | | Features | Stores passkeys | Not published | 0/3 | Not published for other sites; the App Store listing mentions passkeys only for sign-in across Zoho apps [4]. | | Features | Sign-in approval prompts | Yes | 3/3 | Push notification is a listed way to approve sign-in to Zoho accounts [1][4]. | | Features | Counter-based (HOTP) codes | Not published | 0/3 | Not published; help pages describe only time-based codes [6]. | | Features | Folders, tags or search | Yes | 3/3 | Help article says you can add OTP accounts to folders and reorder them [5]. | | Price | Cost with backup on two devices | $0 | 4/4 | Free app with encrypted backup and sync across devices at no charge [1][2][4]. | ## Plans | Plan | Price | Per month (USD) | |---|---|---| | Free | Free [1] | $0 | ## Strengths - Free, with apps for iOS, Android, Windows and macOS [1][4][8]. - Backups are encrypted with a passphrase that Zoho says it does not store [2]. - Guest mode lets you use the app without signing in [6]. - Supports folders and a biometric app lock [1][5]. ## Limits - Backup and sync need a Zoho account; guest mode codes stay on the device [2][6]. - Passkeys are mentioned only for sign-in across Zoho apps; storing them for other sites is not documented [4]. - No Linux or web app is listed [1][4]. - Counter-based (HOTP) codes are not mentioned in the help pages [6]. ## Sources 1. [Zoho OneAuth](https://www.zoho.com/accounts/oneauth/), Zoho, accessed 2026-10-08 2. [Manage passphrase](https://help.zoho.com/portal/en/kb/accounts/oneauth/secure-non-zoho-accounts-with-2fa/articles/manage-passphrase), Zoho, accessed 2026-10-08 3. [Zoho OneAuth: authenticator app](https://www.zoho.com/accounts/oneauth/authenticator-app.html), Zoho, accessed 2026-10-08 4. [Zoho OneAuth on the App Store](https://apps.apple.com/app/apple-store/id1142928979), Apple App Store, accessed 2026-10-08 5. [Organize 2FA accounts](https://help.zoho.com/portal/en/kb/accounts/oneauth/secure-non-zoho-accounts-with-2fa/articles/organize-your-2fa-accounts), Zoho, accessed 2026-10-08 6. [Add 2FA accounts to OneAuth](https://help.zoho.com/portal/en/kb/accounts/oneauth/secure-non-zoho-accounts-with-2fa/articles/add-2fa-accounts), Zoho, accessed 2026-10-08 7. [Export and Import 2FA Accounts](https://help.zoho.com/portal/en/kb/accounts/oneauth/secure-non-zoho-accounts-with-2fa/articles/export-and-import-2fa-accounts), Zoho, accessed 2026-10-08 8. [Import 2FA accounts from Google Authenticator](https://help.zoho.com/portal/en/kb/accounts/oneauth/secure-non-zoho-accounts-with-2fa/articles/import-from-google-authenticator), Zoho, accessed 2026-10-08 9. [Zoho security](https://www.zoho.com/security.html), Zoho, accessed 2026-10-08 10. [Zoho Bug Bounty Program](https://bugbounty.zohocorp.com/), Zoho, accessed 2026-10-08