Yubico Authenticator review
A free, open-source companion for storing TOTP and HOTP codes on a YubiKey.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Yubico Authenticator is a companion app for YubiKey security keys, designed for people who want one-time password credentials stored on dedicated hardware. It generates OATH TOTP and HOTP codes, adds accounts by QR code or manual entry, and manages several YubiKey functions. Alongside authenticator codes, the app supports FIDO2 passkeys and PINs, PIV certificates and keys, Yubico OTP and other slot credentials, fingerprints on YubiKey Bio keys, and YubiKey application settings. It runs on Windows, macOS, Linux, Android, iPhone, and iPad.
The main distinction is its hardware-backed storage model. Authentication secrets remain in the YubiKey secure element rather than on the host device, and the credentials are not extractable. That gives users a consistent way to access configured credentials on compatible devices while using the same physical key. The app is free and open source, making it a focused option for individual YubiKey owners who prefer local hardware storage over a cloud-based authenticator. Its broader YubiKey management features also make it more useful than a code-only app for people managing passkeys, PIV settings, OTP slots, or Bio fingerprints.
This approach also defines the product's boundaries. A compatible YubiKey is required, so it is not suitable as a standalone authenticator for users who want codes stored on a phone or synchronized through an account. The published capabilities do not include encrypted backup or multi-device synchronization, and credentials cannot be extracted from the key. Choose Yubico Authenticator when hardware storage and YubiKey credential management are priorities; choose another authenticator when cloud recovery, independent device access, or synchronized software-based storage matters more.
Yubico Authenticator pros and cons
- Where it wins
- Stores TOTP and HOTP credentials in the YubiKey secure element
- Manages passkeys, PIV credentials, OTP slots, and fingerprints
- Supports Windows, macOS, Linux, iOS/iPadOS, and Android
- Where it doesn't
- Requires a compatible YubiKey and is not a standalone authenticator
- Does not provide encrypted backup or multi-device synchronization
- Credentials are not extractable from the hardware key
Yubico Authenticator fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update