Evidian Authenticator

Evidian Authenticator is a free Android and iOS client for push authentication with Evidian Web Access Manager. It supports push approvals, offline QRentry QR codes, and HOTP or TOTP one-time passwords. Users can scan QR codes to identify themselves, add code accounts, and use icons and links for more than 400 applications. HOTP/TOTP accounts can be exported as plain text or JSON, including password-protected AES-256-encrypted JSON. Enrolled keys and accounts can be protected with an app PIN, fingerprint, or NFC tag on compatible devices. The app records account or key usage, and WAM profile changes can generate confirmation notifications. Web Access Manager supports on-premises, cloud, or service deployment, plus adaptive and step-up policies based on factors such as location, time, browsing environment, and requested resource. The app listing says no data is collected or shared with third parties. The listed plan is free.

Evidian Authenticator offers several mobile authentication methods plus protected account export and local app safeguards. Its value depends on using the associated Evidian access-management environment.

It suits organizations using Evidian Web Access Manager and users needing mobile push or one-time-password authentication. Self-hosted deployments can also use its physical and biometric factor integrations.

Evidian Authenticator is a mobile companion for Evidian Web Access Manager that combines push approvals, offline QRentry codes and HOTP/TOTP passwords. It suits organizations already deploying Evidian’s access-management stack, while code-only users can still use its broad QR account support. The main qualification is that its signature push workflow depends on Web Access Manager rather than standing alone.

Overview

The app is built first as a client for push authentication with Evidian Web Access Manager (WAM). A QR scan identifies the user, after which a push approval completes the sign-in; offline QRentry codes provide a route when push is unavailable. WAM can be deployed on premises, in the cloud or as a service, so the surrounding architecture can fit different deployments, but the app’s push value is tied to that companion product.

It is also a conventional one-time-password authenticator. HOTP and TOTP accounts can be added by scanning QR codes, with icons and links for more than 400 applications. That makes the app practical for consolidating many code-based accounts, although the strongest reason to choose it remains integration with Evidian rather than a standalone push service.

Account portability is unusually explicit. HOTP/TOTP accounts can be exported as plain text or JSON, including password-protected JSON encrypted with AES-256. Plain-text export is convenient but materially less suitable for safeguarding credentials than the encrypted option. Enrolled keys and accounts can be locked with an app PIN, fingerprint, or NFC tags on NFC-capable devices. Usage history is retained, and WAM profile changes can trigger confirmation notifications.

Key features

• Push authentication: QR identification followed by a push approval gives WAM users a direct mobile sign-in flow; it has little value without WAM.
• Offline QRentry: Offline codes provide an alternative to push when connectivity or approval delivery is not available.
• HOTP and TOTP: QR enrollment supports standard one-time passwords for other services, with coverage cues for more than 400 applications.
• Protected export: Plain-text and JSON exports are offered, including AES-256-encrypted JSON with a password. The safer format is the sensible choice for migrations and backups.
• Local safeguards: PIN, fingerprint and compatible NFC tags can protect enrolled keys and accounts.
• WAM security controls: WAM supports adaptive and step-up policies using factors such as location, time, browsing environment and requested resource, plus integrations with services including Gemalto, RSA and Double Octopus.
• Passwordless and factor support: The associated deployment supports passwordless authentication, smart cards, security tokens, fingerprint and vein biometrics, and RFID badges, with Windows authentication extension, LDAP/Active Directory and Evidian Enterprise SSO integration.

Pricing

The Evidian Authenticator mobile app is free: the listed plan is free. That covers the mobile authenticator itself, with no paid app tier described. WAM is a separate product; its product page offers quote requests rather than a displayed price, so organizations should budget for custom pricing and the associated deployment.

This structure suits existing WAM customers that need a no-cost mobile client. It is less compelling for individuals or teams seeking an independent push-MFA service, because the principal workflow requires the separately procured WAM environment.

Platforms

Evidian Authenticator is available on Android and on iPhone and iPad through the App Store. The companion deployment is self-hosted-capable, and WAM can also run in the cloud or as a service. Google Play’s developer disclosure says the app collects no data and shares no data with third parties. Support is provided at [email protected].

Who it's for

Choose it when your organization uses, or plans to use, Evidian Web Access Manager and wants push, offline QRentry and standard OTP methods in one mobile app. It also fits administrators who value encrypted account export, local app locks and WAM’s adaptive step-up policies.

Look elsewhere if you need a self-contained push authenticator without a WAM deployment, or if your priority is a clearly published all-in-one service price rather than a free client paired with custom-priced access management.

Pros and cons

Pros

• Multiple authentication paths: Push, offline QRentry and HOTP/TOTP cover connected, offline and code-based sign-ins.
• Strong export option: AES-256-encrypted JSON adds meaningful protection for account migration and backup.
• Flexible local protection: PIN, fingerprint and NFC controls protect enrolled material on supported devices.
• Broad OTP enrollment: QR setup and references to more than 400 applications make it useful beyond a single account.

Cons

• Push depends on WAM: The app is not a standalone push-MFA backend.
• Pricing is incomplete at the platform level: The app is free, but WAM requires a quote, complicating total-cost planning.
• Export choices differ in risk: Plain-text export is materially weaker than encrypted JSON for sensitive account data.

Alternatives

For a broader directory of products, see Multi-Factor Authentication Software and Authenticator apps.

Duo Mobile is the better fit for a freemium service with a free plan for up to 10 users and a published Duo Essentials tier at $3 a month.

LoginTC suits teams wanting cloud, self-hosted and API options, including a free Cloud Starter plan for up to three users.

Protectimus MFA is worth considering when you need a paid, customizable deployment with a $2-per-user monthly Custom plan.

LinOTP is the alternative for organizations seeking free open-source software under AGPLv3 and GPLv2.

LiveEnsure offers a free 30-day developer demo path for commercial integrations.

OpenOTP Authentication Server is an option for a self-hosted server with a 25-user freeware tier.

Rublon Authenticator fits a freemium approach with a one-user free plan and a paid business tier.

Spriv Adaptive MFA is a choice for adaptive MFA with a free-forever Startup plan for up to two users and two servers.

Verdict

Evidian Authenticator is a strong choice for organizations standardizing on Evidian Web Access Manager: it combines several mobile factors, practical OTP compatibility and well-considered account protection at no app cost. Choose it chiefly for that WAM integration and its encrypted export; choose another authenticator when you need independent push authentication or a complete, transparent service price without a separate access-management purchase.