OpenFactor

OpenFactor generates two-factor authentication codes on iPhone and Apple Watch. No account, no server, no analytics, no third-party code. Your accounts are encrypted before they are stored. The key that opens them lives in the app's private container on each device, is never synced, is never written to the Keychain, and is excluded from device backups. If you turn on iCloud sync, the encrypted records travel through your own iCloud Keychain and the key does not go with them. DESIGN PRINCIPLES · No backend to breach, subpoena, or shut down. · No telemetry. · Built in the open from the first commit. · Your accounts are yours to take elsewhere. WHAT IT DOES · Generates TOTP and HOTP codes to the published standards, verified against the test vectors in those specifications. · Shows one code at a time on Apple Watch, which keeps working with your iPhone off, absent, or out of range. · Imports from other authenticators, including Google Authenticator transfer codes and Aegis vaults. Scan a setup code with the Camera app, open one from an image, or share an image straight into OpenFactor without saving it to Photos first. · Exports an encrypted backup whose format is public and documented, or a plain file for moving to another app. The difference is stated on screen, because portability should not require hiding the security cost. · Locks behind Face ID, Touch ID, or your passcode. WHAT IT DELIBERATELY DOES NOT DO · No Mac app and no browser extension. A second factor is worth less the moment it lives on the machine asking for it. · No password storage and no autofill. This is an authenticator, not a password manager. OPEN SOURCE · The source is public, including the design documents, review findings, and hardware experiments behind them. Read it at github.com/dragut-eth/openfactor