- Home
- Authenticator apps
- Authy
Authy
What it is
Authy is a two-factor authentication app for Android and iOS. It generates TOTP codes and includes encrypted cloud backup and multi-device support. Users can keep an encrypted backup of their authentication setup and sync it across supported devices. The listed plan is free at no cost, covering two-factor authentication, encrypted cloud backup, and support for multiple devices. Authy is listed for Android and iOS; no other platforms or code types are specified. Its feature set centers on mobile TOTP code generation, backup, and synchronization, so the platform list is important when deciding whether it fits a particular device setup.
For and against
For
- Generates TOTP codes
- Includes encrypted cloud backup
- Supports multiple devices
- Free plan costs nothing
Against
- Listed platforms are limited to Android and iOS
- No other code types are specified
The verdict
Authy combines TOTP generation with encrypted backups and multi-device support at no listed charge. Its stated platform coverage is Android and iOS.
Who it suits
Authy suits people looking for a free mobile authenticator with encrypted backup and syncing across multiple devices. It is listed for Android and iOS users.
Plans and prices
Free
Two-factor authentication · Encrypted cloud backup · Multi-device support
Read 21 Sep 2026 · authy.com
Authy
Free app for two-factor authentication
Read 11 Oct 2026 · authy.com
On the record
- Access protection
- The app supports Touch ID, PIN protection, and passwords to protect access to 2FA tokens.authy.com · read 11 Oct 2026
- Account setup
- The app can capture 2FA QR codes from services including Facebook, Amazon, Google, Microsoft, and Dropbox.authy.com · read 11 Oct 2026
- Backup password limit
- Authy says it cannot recover a forgotten backup password because it never receives that password.authy.com · read 11 Oct 2026
- Code type
- totpauthy.com · read 21 Sep 2026
- Device approval
- Users can add new devices through SMS, voice, or approval from an existing device.authy.com · read 11 Oct 2026
- Encrypted backup
- Yesauthy.com · read 21 Sep 2026
- Encrypted backups
- Authy says it encrypts 2FA data and cloud backups without storing users' backup passwords.authy.com · read 11 Oct 2026
- Maker
- Authy's website identifies Twilio Inc. in its copyright notice.authy.com · read 11 Oct 2026
- Maker founded
- Twilio says it was founded in 2008.twilio.com · read 11 Oct 2026
- Maker headquarters
- Twilio lists its headquarters in San Francisco, California.investors.twilio.com · read 11 Oct 2026
- Multi-device management
- Users can manage devices, rename or remove lost or stolen devices, and disable future app installations.authy.com · read 11 Oct 2026
- Multi-device sync
- Yesauthy.com · read 21 Sep 2026
- Offline use
- Authy generates tokens on the device so users can access secured websites without an internet connection on the phone.authy.com · read 11 Oct 2026
- Purpose
- Authy is a two-factor authentication app for protecting online accounts from hackers and account takeovers.authy.com · read 11 Oct 2026
- Support
- Authy directs users to support for account resets, phone number changes, account deletion, and other assistance.authy.com · read 11 Oct 2026
- Supported platforms
- iOS,Androidauthy.com · read 21 Sep 2026
- Token access
- Users can access tokens on a phone, tablet, or Apple Watch.authy.com · read 11 Oct 2026
The review
Authy is a free TOTP authenticator for people who want protected codes synchronized across personal devices. It suits users who value encrypted recovery and offline access more than broad platform coverage. The central compromise is simple: losing the backup password can make an encrypted backup unrecoverable.
Overview
Authy protects online accounts with time-based one-time passwords generated locally on the device. It can scan setup QR codes from services including Facebook, Amazon, Google, Microsoft, and Dropbox, then produce a token without an internet connection on the phone. That is useful when signing in during travel or whenever mobile connectivity is poor.
Its strongest proposition is pairing cloud backup with multi-device access at no charge. Tokens can follow you to a phone, tablet, or Apple Watch instead of remaining tied to one handset. Authy’s site identifies Twilio Inc. as the maker; Twilio lists its headquarters in San Francisco and says it was founded in 2008.
Key features
- Encrypted backups: Authy says it encrypts two-factor data and cloud backups without storing the backup password. That keeps the provider from holding the key, but it also means a forgotten password cannot be recovered by Authy and may leave the backup inaccessible.
- Multi-device access: Tokens work on phones, tablets, and Apple Watch. New devices can be enrolled by SMS, voice call, or approval from an existing device, giving you alternatives when one approval method is inconvenient.
- Offline TOTP generation: Codes are created on the device, so an internet connection is not required at sign-in time. This is a practical advantage for unreliable networks, though it does not remove the need to protect the device itself.
- Local access controls: Touch ID, a PIN, and passwords can protect the token store. These controls add a barrier if someone gains access to an unlocked or unattended device.
- Device management: You can rename or remove lost or stolen devices and disable future app installations. Those controls make a multi-device setup easier to contain after a device is misplaced.
- Account assistance: Authy directs users to support for resets, phone-number changes, account deletion, and related issues. The backup-password rule remains the key boundary: support cannot recover a password Authy never receives.
Pricing
Authy has no paid tier. The Free plan costs nothing and includes two-factor authentication, encrypted cloud backup, and multi-device support. It is the appropriate choice for individual users who need the full feature set without a subscription.
A separate Authy plan also costs nothing and is described as the free app for two-factor authentication. There is no stated seat quota, usage allowance, trial period, or renewal charge. In practice, the meaningful value is in the no-cost access to backup and device synchronization rather than plan differentiation.
Platforms
Authy supports Android and iOS. Within that mobile focus, token access extends to a tablet and Apple Watch, but the stated platform coverage does not include desktop operating systems or browser extensions. Choose it when your authentication workflow is mobile-centered; look elsewhere if you need a desktop-native authenticator.
Who it's for
Authy is best for individuals managing several online accounts who want a free safety net when changing or losing a phone. It is especially suitable for people who need codes offline and are comfortable safeguarding a backup password that cannot be reset by the provider. It is less suitable for users who require Linux, macOS, Windows, or web access, or for anyone unwilling to accept responsibility for backup-password recovery.
Pros and cons
- Pro: Encrypted cloud backup is included at no charge, reducing the risk of a phone-only token setup.
- Pro: Multi-device access covers phones, tablets, and Apple Watch, with several ways to approve a new device.
- Pro: On-device code generation works without phone internet access.
- Pro: Lost-device removal and installation controls help contain a compromised or missing device.
- Con: A forgotten backup password cannot be recovered, so encryption places a real recovery burden on the user.
- Con: Android and iOS are the stated platforms, limiting people who authenticate primarily from computers.
Alternatives
For a broader cross-platform, open-source option, choose Proton Authenticator, which is free on Android, iOS, Linux, macOS, and Windows and lets anyone inspect its code. Duo Mobile is a better fit for organizations needing a 10-user free tier or paid phishing-resistant MFA and passwordless authentication; Duo Essentials costs $3 a month.
Google Authenticator and Microsoft Authenticator are free Android and iOS alternatives. Choose Yubico Authenticator if you want free, open-source software whose credentials require a YubiKey. Zoho OneAuth adds free coverage across Android, iOS, macOS, and Windows for Zoho work and personal accounts. Bitwarden suits users who also want password management, with a free plan covering unlimited devices and passwords. Ente Auth is another free, fully open-source choice with importing and exporting across Android, iOS, Linux, macOS, web, and Windows. Browse more choices in Authenticator apps.
Verdict
Choose Authy if you want free TOTP codes, encrypted backup, and synchronized access across mobile devices, with offline generation as a useful extra. Look elsewhere when desktop or web support matters, or when you need a recovery path for a forgotten backup password. For the right mobile-first user, its no-cost combination of backup and multi-device access is the main reason to choose it.