Kryon Authenticator: 2FA

Kryon Authenticator keeps your two-factor authentication (2FA) codes in one secure place. Generate verification codes offline and sync across devices with end-to-end encryption.

Start without a Kryon account. Sign in when you want to enable sync.

Add accounts your way Scan a 2FA QR code, choose a QR image or enter a setup key manually. Kryon works with websites and apps that use time-based one-time passwords (TOTP).

Keep your codes private Your authentication secrets are encrypted on your device. When you enable sync, your vault is encrypted before upload and decrypted on your connected devices. Kryon cannot read the contents of your synced vault.

Sync across devices Keep your codes in sync with your Kryon account. Add another device using your master password, recovery key or approval from an existing device. Review connected devices and active sessions in the app.

Use codes offline Generate verification codes without an internet or cellular connection, whether you're traveling or away from a network.

Move from another authenticator Import codes from Google Authenticator, 2FAS, Aegis and Ente Auth using supported transfer QR codes and backup files.

Find and copy codes quickly Search by service or account, tap to copy a code and arrange your accounts in the order you prefer. View the current and next code together, with a countdown to the next refresh. Choose a light or dark theme.

Add protection on iPhone and iPad Enable App Lock with Face ID or Touch ID on supported devices. Choose to hide codes until you reveal them, and blur the app preview in the app switcher.

Your codes on Apple Watch View codes from your paired iPhone on Apple Watch. Search your accounts and see a countdown until each code refreshes.

Back up and restore Export a password-protected backup and restore it when needed. Keep the recovery key for your synced vault somewhere safe so you have a way back in if you forget your master password.

A Kryon account and an internet connection are required for synchronization. Adding accounts and generating local TOTP codes work without signing in.

Discovery signals