Aegis Authenticator
TAS Score: S3/3 — D5/5 — A3 / T2
Brief Description
Open-source 2FA authenticator for Android. Encrypted vault with biometric unlock. Supports TOTP and HOTP. Import from Google Authenticator, Authy, and others. Encrypted backups.
Architectural Role
Client-side security layer — two-factor authentication. Purely local, no cloud component.
Technical Autonomy
- Works without internet (TOTP is offline by design)
- Stores data locally (encrypted vault on device)
- Does not require external accounts
- Allows data export (encrypted/plain JSON, Google Authenticator format)
- Provides offline updates (F-Droid)
Philosophical Assessment (whose.world criteria)
| Criterion | Status | Comments |
|---|---|---|
| Pause | ✅ | Codes generate offline forever. |
| Exit | ✅ | Full export in multiple formats. |
| Recoverability | ✅ | Encrypted backup/restore. |
| Visibility | ✅ | Fully open-source. |
| External Dependencies | ✅ | Zero. Completely offline. |
Rating key: ✅ fully meets · ⚠️ partially meets or requires configuration · ❌ does not meet
Configuration (Minimal)
Install from F-Droid. Set up vault password. Import existing 2FA codes or scan new QR codes. Enable automatic encrypted backups.
Related Recipes
Alternatives
| Alternative | Autonomy | Notes |
|---|---|---|
| ente Auth | A3 / T2 | Cross-platform with E2E encrypted cloud backup. |
Trajectory
Direction: stable Mature, well-maintained. Android only (no iOS). Active development with regular releases. Signal assessment: | Signal | Status | Evidence | |——–|——–|———-| | License | ✅ | GPL-3.0, unchanged. | | Feature gating | ✅ | All features free. | | Self-hosting | ✅ | Nothing to host. | | Governance | ✅ | Beem Development. Open community. | Signal key: ✅ opening · ➖ neutral · ⚠️ closing —
Sources
- Website: https://getaegis.app
- Documentation: https://github.com/beemdevelopment/Aegis/wiki
- Repository: https://github.com/beemdevelopment/Aegis
- Docker image: —
- Community: https://github.com/beemdevelopment/Aegis/discussions