Smart 2FA Manager Android

• AES-256-GCM Encryption — industry-standard encryption for your secrets
• SHA-512 Key Derivation — strong password hashing
• QR Code Scanning — quickly add services by scanning QR codes
• Real-time Search — filter services by name instantly
• One-Tap Code Copying — copy TOTP codes with a single tap
• Offline Operation — no internet connection required
• Material Design UI — clean and intuitive interface
• Master Password Protection — all data encrypted with your master password
• Interactive Tooltips — long press any button to see its function

Installation:

1. Download the APK from the Releases page
2. Enable "Unknown Sources" in your Android settings
3. Install the APK and open the app

First Launch:

1. Create a master password — this password encrypts all your 2FA secrets
2. WARNING — if you lose this password, your secrets are lost forever (no recovery!)
3. Add your first service — tap the menu button and select "Add Service"

Option 1: Manual Entry

1. Tap the menu button (three dots)
2. Select Add Service (+)
3. Enter service name and secret key (Base32 format)
4. Tap Add

Option 2: QR Code Scan

1. Tap the menu button (three dots)
2. Select Scan QR (camera icon)
3. Scan the TOTP QR code from your service provider
4. Service will be added automatically

Using TOTP Codes:

• Copy Code — Tap the "COPY" button to copy the current code
• View Secret — Tap the "SECRET" button to see the secret key
• Delete Service — Tap the "DELETE" button to remove a service
• Search — Tap the "SEARCH" icon to filter services by name

Main Screen:

• Service Cards — List of all your 2FA services
• TOTP Code — Current 6-digit code with countdown timer
• Color Coding — Blue (normal), Orange (10 sec left), Red (3 sec left)
• Service Counter — Shows number of services in toolbar

Toolbar Buttons:

Menu Buttons:

Service Card Buttons:

Encryption:

• Algorithm — AES-256-GCM (Galois/Counter Mode)
• Key Derivation — SHA-512
• IV — Random 12-byte initialization vector per encryption

Data Storage:

• Location — Documents/.2fa/secrets.enc
• Format — Encrypted JSON with service:secret pairs
• No Internet — App never sends data over the network
• Local Only — All secrets remain on your device

Master Password:

• Never stored — Password is only used to derive encryption key
• No recovery — If forgotten, secrets cannot be recovered
• Local only — Password never leaves your device

• Python CLI version
• Python GUI version
• Python BASH version

By using this software, you agree to the full disclaimer terms.

Software provided "AS IS" without warranty. You assume all risks.

Full legal disclaimer: See DISCLAIMER.md

License: BSD 3-Clause License