Recommended Free Tools
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Aegis Authenticator is a free, open-source Android app for storing and using two-step verification codes. It supports the common HOTP and TOTP standards, lets you protect its vault with a password or biometrics, and offers manual exports and automatic backups. Its security features help protect the vault, but they do not make every sign-in phishing-proof or replace passkeys, hardware security keys, or other service-specific authentication methods.
What Aegis Authenticator does
The Aegis project describes its app as “a free, secure and open source 2FA app for Android.” Aegis stores the secret keys used to generate one-time codes for services that support HOTP or TOTP. The project says it works with thousands of services, and F-Droid notes that services compatible with Google Authenticator generally work with Aegis.
That compatibility does not make Aegis a universal replacement for every authentication option. A service may use a passkey, hardware key, push approval, or its own method instead of a standard one-time password. Check the sign-in methods offered by each service before moving or disabling an existing method.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →How Aegis protects its vault
According to the Aegis project’s README, the vault is encrypted with AES-256-GCM. Password unlocking uses scrypt; biometric unlocking relies on a key stored through Android Keystore. The app also documents screen-capture prevention and tap-to-reveal for codes.
#1 Best Overall
- Fips 140-2 Level 3 validation (pending 1 Q 2019)
- Aegis Configurator compatible
- Separate Admin and User mode
- Two Read-Only modes
- Data recovery pins
These are documented app features, not a guarantee against every device compromise, malicious app, account takeover, or phishing attack. Aegis protects stored tokens; it cannot stop an attacker from tricking you into entering a code on a fake sign-in page or compromising the service account itself.
The project’s FAQ warns that biometric unlocking can be buggy on some device implementations. It also explains that forgetting the vault password can mean losing access to the vault. Keep the password somewhere you can recover it securely, and test that a backup can be restored before relying on it.
Adding tokens and moving from another authenticator
You can add tokens by scanning a QR code with the camera, scanning an image of a QR code, or entering the details manually. Aegis also documents imports from 2FAS Authenticator, Authenticator Plus, Authy, andOTP, FreeOTP, FreeOTP+, Google Authenticator, Microsoft Authenticator, Steam, TOTP Authenticator, and WinAuth.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #2
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T120. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T120 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-C port : Insert the T120 security key into the USB-C port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
Import compatibility depends on what the source app can export and the format it produces. Aegis says some imports require root access when the other app has no export option. Its FAQ specifies a required export-file format for Authenticator Plus and says its .db format is not supported, so do not assume every app backup can be imported directly.
Moving Google Authenticator codes
- In Google Authenticator, use its export function to display transfer QR codes, following Google’s current in-app prompts.
- In Aegis, choose the import option for Google Authenticator and scan the displayed QR code or codes.
- Check that the expected accounts appear in Aegis, then test codes by signing in to the relevant services while keeping your existing access and recovery options available.
If the transfer method or menu labels differ in your installed versions, use the apps’ current instructions. Do not remove the old authenticator or discard recovery codes until you have confirmed that the new setup works.
Backups, exports, and changing phones
Aegis distinguishes manual exports from automatic backups: exports are initiated by the user, while backups happen automatically once configured. The vault-file format is the same, and Aegis supports encrypted and plaintext exports. Use an encrypted export for routine storage; plaintext is not a safe default for retaining sensitive authentication secrets. The FAQ says the vault password is used for encrypted export and import.
Rank #3
- Item Package Quantity - 1
- Product Type - FLASH DRIVE
- Model Number - ASK3-NX-8GB
- This pre-owned product has been professionally inspected, tested and cleaned by Amazon qualified vendors.
Before switching phones, create or confirm a recent encrypted backup, make sure you know the vault password, and verify that you can reach the file from a location available on the new device. On the new phone, install Aegis, restore or import the encrypted vault, unlock it, and verify important accounts before wiping or trading in the old phone. Keep service recovery codes or another working sign-in method available during the transition.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesCan Aegis back up to the cloud automatically?
Automatic cloud backup depends on a provider app that is installed and fully participates in Android’s Storage Access Framework. Aegis says the app itself has no internet access and cannot build direct integrations for particular providers. Its FAQ names Nextcloud as a known compatible provider. Another documented arrangement is to save backups in a local folder and use a separate sync app to copy that folder.
A file stored in a cloud account still needs protection: use an encrypted vault export and secure the account that holds it. Cloud synchronization is not a substitute for checking that a backup exists and can be restored.
Rank #4
- Ultra-Compact FIDO2 Security Key - Plug-and-stay or carry on a keychain. This USB-A hardware security key offers portable, always-on protection for desktop and mobile use. (Item Size: 0.75 X 0.74 IN x 0.25 IN)
- USB-A Hardware Key for All Devices - Works with USB-A ports on PC, Mac, Android, and other laptop/notebook device. Enables secure, cross-platform login with FIDO2.0 passkey support.
- FIDO Certified Security Key - Meets FIDO and FIDO2 standards. Works with Google, Microsoft, GitHub, Dropbox, and more. Please check service compatibility before purchase.
- Passwordless Login with Passkey - Supports passkey login via WebAuthn and CTAP2. Enjoy password-free sign-ins where supported. Not all websites or services currently support passkeys.
- Advanced Multi-Factor Authentication - Offers 200 FIDO2 passkey slots and 50 OATH-TOTP slots. Strong, flexible 2FA/MFA support across various apps and authentication platforms.
Is a USB drive necessary?
No. A USB flash drive is one optional place to keep a manually managed encrypted export; Aegis does not require a drive or specify a model, capacity, or brand. A drive can be useful as removable storage, but it does not replace a recoverable vault password or a tested restore process.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Where to get Aegis and which devices it supports
Aegis is an Android app. The project FAQ says it has no plans for iOS, Windows, macOS, or browser-extension versions, so users who need the same authenticator on those platforms should not assume Aegis will provide it.
As listed by F-Droid on October 7, 2026, Aegis version 3.4.3 was added September 9, 2026, and requires Android 6.0 or newer. Those are F-Droid listing details, not a guarantee that every device or distribution channel has the same release; check the current listing and project release instructions when installing.
Best Value
- Protect accounts with USB-A & NFC 2FA security key. Hardware-based authentication blocks phishing, credential theft & unauthorized access across cloud, enterprise & personal platforms.
- FIDO2 Level 2 certified Security Key. TAA compliant and supports Apple ID, Microsoft Azure/Entra ID, AWS, Google, Facebook, Salesforce, DUO & more. Works with Chrome, Safari & Edge across major OS.
- Plug & play USB-A Security Key with NFC tap login. No software, drivers or batteries required. Works with Windows PC, MacBook, iPhone, Android & Chromebook for fast, secure authentication.
- Built with FIPS 140-2 Level 3 secure element for advanced encryption. Trusted by IT teams, healthcare, education & government for secure authentication and identity protection.
- IP68 waterproof, dustproof & crush-resistant design. Supports FIDO2, U2F, OTP, PIV, Mini Driver & smart card login. Durable USB security key for long-term enterprise and daily use.
The project says its Google Play and GitHub APK releases use the same signing key and provides a verification procedure. F-Droid distributes its own build and publishes build metadata and reproducibility links. Treat these as distinct distribution channels, and follow the project’s current verification guidance rather than assuming APKs from different sources are interchangeable.
Who Aegis is a good fit for
- Android users who want a free, open-source manager for standard HOTP and TOTP codes.
- People who want control over an encrypted local vault and the option to manage encrypted exports or compatible automatic backups.
- Users prepared to safeguard the vault password and maintain a recovery plan for a lost or replaced phone.
It is a less suitable choice if you need an iOS, desktop, or browser-extension version from Aegis, or if your accounts rely on authentication methods that do not use compatible one-time-password tokens.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
