AuthletScan and go
Scan the QR code a service shows when you turn on two-step verification, or type the setup key by hand.
Private, offline 2FA codes
Your codes stay on your device.
Authlet generates the one-time codes for your two-factor logins. No accounts, no ads, no tracking, and nothing ever leaves your phone.
Coming soonApp Store
Coming soonGoogle Play
Free · iPhone and Android · English and Turkish
Accounts+
Copied
Live demo with sample keys. Tap a code to try it.
No sign-up
No ads or tracking
Works in airplane mode
Data not collected
Everything you need, nothing you don’t
Standard time-based codes that work with any service that supports authenticator apps.
Import from Google Authenticator
Scan its “Transfer accounts” QR codes to move everything over, even exports split across several codes.
Tap to copy
A countdown ring shows when the next code arrives. Copied codes are cleared from the clipboard after 30 seconds.
Face ID and fingerprint lock
Optionally require Face ID, Touch ID, your fingerprint or device passcode to open the app.
Encrypted backups
Export all accounts to one file, encrypted with a password you choose. Restore on any iPhone or Android.
Simple by design
Rename, reorder and delete accounts. Light and dark mode. SHA-1, SHA-256 and SHA-512, 6 or 8 digits.
Set up in under a minute
Turn on 2FA
In your service’s security settings, choose “authenticator app”.
Scan the QR code
Tap + in Authlet and point your camera at the code on screen.
Enter the code
Type the 6-digit code to confirm. From now on, it’s one tap away.
Private by default
Authlet makes no network requests. There is no server to hack and nothing to leak.
- Secret keys live in the iOS Keychain or Android Keystore and are excluded from cloud backups.
- Codes are hidden in the app switcher.
- Backups are always encrypted with AES-256 and a password only you know.
- No analytics, no crash reporting, no third-party SDKs.
Support
Answers to common questions, and a real person if you need one.
Which services does Authlet work with?
Any service that supports authenticator apps using time-based codes (TOTP, RFC 6238). Counter-based (HOTP) codes are not supported.
How do I move to a new phone?
In Settings, export an encrypted backup and choose a password. On the new phone, import the file and enter the same password. Accounts you already have are skipped.
What if I lose my phone?
Your keys never leave your device, so we can’t recover them. Keep an encrypted backup somewhere safe, and save the recovery codes each service gives you.
Can I import from Google Authenticator?
Yes. In Google Authenticator, choose “Transfer accounts → Export accounts”, then scan the QR codes with Authlet’s scanner.
Does Authlet collect any data?
No. The app has no accounts, analytics or advertising and sends nothing over the internet. See the privacy policy for details.
Get in touch
Found a bug or have a question? Send an email and you’ll get a reply.
authlet@himmetkaan.com