andOTP - Android OTP Authenticator app icon

andOTP - Android OTP Authenticator

Open source two-factor authentication for Android

Jakob Nixdorf · org.shadowice.flocke.andotp

4.3 out of 5 (3 ratings) 100K+ downloads v0.9.0.1-play 7 MB Android 5.1+ PEGI 3 · Everyone

At a glance

Latest version
v0.9.0.1-play (39)
Updated
Jun 12, 2024 (2 years ago)
APK size
7 MB
Requires
Android 5.1+ (API 22)
CPU support
Any (no native code)
Category
Tools (app)
Listed since
Oct 18, 2020 (at least)
Permissions
1 (1 sensitive)
Website
github.com/andOTP/andOTP
Developer contact
[email protected]
Privacy
Developer's privacy policy

About this APK

andOTP - Android OTP Authenticator is an app by Jakob Nixdorf in the Tools category, listed since at least October 2020. It has no native code, so it runs on any Android processor.

It asks for 1 permission, 1 of them sensitive: camera.

What's new in v0.9.0.1-play

https://github.com/andOTP/andOTP/blob/master/CHANGELOG.md

Description

From the listing uploaded by “appupdater”.

andOTP implements like specified in RFC 6238 (HOTP support is currently in beta testing). Simply scan the QR code and login with the generated 6-digit code. : •  Free and Open-Source •  Requires minimal permissions:  •  Camera access for QR code scanning  •  Storage access for import and export of the database •  Encrypted storage with two backends:  •  Android KeyStore (can cause problems, please only use if you absolutely have to)  •  Password / PIN •  Multiple backup options:  •  Plain-text  •  Password-protected  •  OpenPGP-encrypted •  Sleek minimalistic Material Design with three different themes:  •  Light  •  Dark  •  Black (for OLED screens) •  Great Usability •  Compatible with Google Authenticator : To keep your account information as secure as possible andOTP only stores it in encrypted data files. There are two methods of encryption which can be used: the or a . The KeyStore is a system component of Android for securely storing cryptographic keys, the advantage of this approach is that the key is kept separate from the apps data and, as a bonus, can be backed by hardware cryptography (if your device supports this). However, due to that separation, backups with 3rd-party apps like Titanium Backup can not be used if this method is chosen. Such apps only backup the encrypted data files and not the encryption key, which renders them useless. The KeyStore is known to cause a lot of problems, so please only use it if you absolutely have to and know what you are doing. In that case please make sure to make regular backups in case something goes wrong. : If you found a bug during beta testing, please submit your feedback directly on Github (https://github.com/andOTP/andOTP/issues) because for some reason I don't always get notified when new beta feedback is submitted on the Google Play Store. : This app is fully open source (licenses under the MIT license), you can check out the source on GitHub: https://github.com/andOTP/andOTP andOTP is a fork of the great OTP Authenticator app written by Bruno Bierbaumer, which has sadly been inactive for a while. All credit for the original version goes to Bruno. It has since been removed from Google Play, but you can still find the code of his app here: https://github.com/0xbb/otp-authenticator

Security & authenticity

Security rating: Trusted

Signing certificate

  • Certificate with Google's generic name Google Play App Signing gives the keys it manages this name, but anyone can put it in a certificate, so this alone proves nothing.

Store checks and file details

  • Developer signature verified Jun 12, 2024
  • Signed byCN=Android, OU=Android, O=Google Inc., L=Mountain View, ST=California, C=US
  • Signing certificate (SHA-1)E3:0D:41:C4:C6:A1:F6:60:C5:C1:D2:9B:3C:FD:44:5B:0D:8A:4D:56
  • File MD523cb1f45567f146e32b211d30b6a63ea
  • Uploaded by “appupdater” Gold tier · 117,810 followers · uploading since 2020

Scans and ratings come from the source store; the certificate comparisons are AAPKs's own, made from the files' published signatures. AAPKs doesn't scan files itself — compare the MD5 and signer after downloading.

Permissions (1)

andOTP - Android OTP Authenticator requests 1 permission, 1 of them sensitive.

Required hardware & features

andOTP - Android OTP Authenticator APK: questions and answers

Can I install this APK over the version I already have?

Only if it is signed with the same certificate as the copy on your phone and isn't an older version. If Android says “App not installed”, the certificates differ; uninstalling your copy first works but deletes its data unless it is backed up.

Is the andOTP - Android OTP Authenticator APK safe?

No one can promise that a file is safe, but some things can be checked. The source store rates this file Trusted. After downloading, check that the file's MD5 is 23cb1f45567f146e32b211d30b6a63ea.

Tags

More Tools apps