Ente Auth

Ente Auth is a two-factor authenticator by Ente, the company behind the Ente Photos backup service. It shows the time-based codes that websites ask for at sign-in, and also handles counter-based (HOTP) and Steam codes. It runs on Android, iPhone, Windows, macOS, Linux and in a web browser, and the project’s README promises: “Ente Auth is free, and will remain free forever.”

With or without an account

• Without an account, choose Use without backups. The FAQ: “Yes. Choose Use without backups to use Auth entirely offline, with no account and no connection to Ente’s servers.” The codes then live only on that phone and “cannot be restored from Ente’s servers”; the app also excludes itself from Android’s own backup. Back them up yourself (see below).
• With an account, the codes sync to your other devices. Each code is encrypted on the phone before it’s uploaded: “Due to E2EE, the server doesn’t know anything about your codes. Everything is encrypted, including the tags, type, account, issuer, notes, pinned or trash status, etc.” Ente says its cryptography has been audited externally; the audit report it published in 2023 doesn’t name Ente Auth specifically.

Signing in needs “around 1 GB of free RAM”, the FAQ says, for a deliberately heavy password step; on phones with little memory it can fail with a wrong-password message.

Features

• Tags, pinning, notes, search and a preview of the next code.
• Import from Google Authenticator, Aegis, 2FAS, Bitwarden, andOTP, LastPass, Proton, Raivo and OTP Auth, or from a plain list of otpauth links.
• Export as an encrypted file protected by a password you choose, as plain text, or as an HTML page with a QR code for each account, which is the documented way back into Google Authenticator.
• Local backups, once you set a backup password: the app “Creates one local backup per day when you open the app” and keeps up to five.
• Sharing a code with someone for 2, 5 or 10 minutes: the app calculates the codes for that time, encrypts them and puts the key in a link to Ente’s website, so the link itself carries everything.
• App lock with your phone’s lock, a PIN or a password. The FAQ is frank about it: “It does not introduce a layer of cryptographic security.” Screenshots are blocked by default.

Logos for each account

To show a logo next to each code, the app carries about 3,800 of them: 3,247 from the Simple Icons project and 548 contributed by Ente’s users. Simple Icons is published under CC0, but its disclaimer adds that this “doesn’t mean to imply that all icons within the project are also CC0”: the logos belong to their brands, most come without a licence of their own, and a few of the bundled ones are under non-commercial or no-derivatives licences. F-Droid distributes the app with these logos and flags no anti-feature for them. The screenshot on this page is the one of Ente’s own that shows no other company’s logos.

What goes online

• Without an account, nothing, as far as we can see in the code; the sync is skipped entirely in offline mode. With an account, the code talks only to Ente’s server, or to your own if you host one.
• Crash reports are off unless you turn on Crash & error reporting in the general settings; reports then go to Ente’s own Sentry server with a random ID. Ente’s privacy note: “Ente Auth collects no data by default.” Our scan found the Sentry library, which is why it shows below.
• No update check in this build; the developer’s GitHub version checks for updates, F-Droid’s doesn’t.

About this file

• This is F-Droid’s build of version 4.4.26, released on 19 October 2026 and added to F-Droid on 25 October, signed with F-Droid’s key. The Play version (more than 100,000 downloads) uses the same package name, but Ente says Play and F-Droid “may use different signing keys”, so don’t count on updating one with the other.
• 4.4.26 fixes imports from 2FAS and from OTP Auth entries without an issuer, imports multi-part Google Authenticator exports in one go, keeps notes when importing from Aegis and Bitwarden, and explains what to do when an offline-only install can’t reach its encryption key. 4.4.25, from August, redesigned the settings, setup and import screens.
• A known issue in this version: the QR code that shows an account’s secret draws its corner squares in the accent colour, which some hardware tokens with small cameras can’t read (#13336); phone cameras weren’t affected, according to the report. The issue is closed: a later change lets you tap the code to switch the corner colour, but it isn’t in 4.4.26.
• The 65.4 MB file runs on Android 7.0 and later, on 32- and 64-bit ARM and 64-bit x86. Its 10 permissions include the camera for QR codes, fingerprint unlock, internet access for sync, and storage on older Android versions for imports and exports.
• Ente Auth is licensed under the AGPL-3.0. F-Droid’s source archive for this exact build, which includes the logos, is at https://f-droid.org/repo/io.ente.auth_1118_src.tar.gz.

CPU types in this build: arm64-v8a (64-bit ARM, almost every phone since 2017); armeabi-v7a (32-bit ARM, older and budget phones); x86_64 (64-bit Intel, emulators and Chromebooks).

Versions currently kept in the F-Droid repository. We host and check only the newest one. Full changelog.