First public release.
AuthGeek keeps your two-factor codes on your own computer. Add an account by pasting its link, by reading its QR code out of a picture, or by bringing the lot across from Google Authenticator in one go. Everything lives in one encrypted file on this machine: no account, no server, no sync, nothing uploaded.
Authy withdrew its desktop app and left a lot of people with their codes only on a phone. This is for anyone who wants them somewhere else as well.
What it does
- TOTP and HOTP, SHA1, SHA256 and SHA512, six to ten digits, any period
- Add by pasting an
otpauth://link, by choosing a picture of a QR code, or by typing it in - Import everything from Google Authenticator's "Transfer accounts" QR in one go
- Show any account as a QR code, so it can be added to a phone
- Encrypted backup, plain text export and restore, all built in
- Locks itself after a few minutes of not being used
Backup came first
A two-factor secret cannot be recovered from anywhere, so the backup was written before the thing it backs up, and both ways out are tested end to end on every build: an encrypted backup that opens with nothing more than AuthGeek and its password, and a plain text export of one otpauth:// link per line that any other authenticator can read.
Restoring never replaces anything. An identical account is skipped rather than duplicated, and an account with the same name but a different secret is kept as well as the old one, because those are two different accounts.
The vault is AES-256-GCM with the key derived by Argon2id. The master password cannot be reset, which is a fact rather than a policy: the password is what the key is made from. There is no back door, for you or for anyone else.
Downloads below: AuthGeekSetup.exe (installer) and AuthGeek-portable.exe (no install needed). SHA256SUMS.txt lists the hashes for both.
Full Changelog: https://github.com/techygeekshome/AuthGeek/commits/v1.0.0