Is 2fa safe?

Overview 2fa is the modern privacy and security focused two factor authenticator. It is very easy to use and delivers exceptional security through modern cryptographic algorithms. The core is written in Rust and the app works fully offline without Google Play Services. Features Support for TOTP, HOTP, and Steam Guard codes via .maFile . Add accounts via QR codes, OTPAuth links, files, or your gal…

Developer: 979
Category: Security
Earliest archived version: 03 Jun 2026
License: EUPL-1.2 (per IzzyOnDroid metadata)

02 / Release notes

Release notes from IzzyOnDroid

14 Oct 2026

1.2sp1

Changes since the 1.2 release: - Added Japanese translations - Updated donation button link. - Increment Android gradle to 9.8.1. - Increment Android kotlin to 2.4.21. - Increment Android rustc to 1.99.0. - Increment Rust serde json to 1.0.154. - Increment Rust sha2 to 0.11.1. - Increment Rust…

Full notes →

26 Sept 2026

1.2

Changes since the 1.2-rc-1 release: - Fixed accounts not being normalized when importing from Aegis. - Updated donation button link to Ko-fi page. - Increment Android navigation-compose to 2.10.2. - Increment Rust aegis to 0.9.20.

Full notes →

03 Jun 2026

1.1.4

Changes since the 1.1.3 release: - Improved apk size and memory footprint. - Switched from Eclipse Adoptium to OpenJDK. - Updated Android kotlin to 2.4.0. - Updated Rust aegis to 0.9.12. - Updated Rust rustc to 1.96.0.

Full notes →

03 / Package identity

Technical fingerprint

Application IDapp.ninesevennine.twofactorauthenticator

Latest APK SHA-256b811b2a4ef81ec6ac6cb64771b3406317465c8557d1d2a00b851eeeacc6ecfcf

Signing certificateE5:B2:8E:A1:E0:51:C2:32:DE:A9:4C:27:C0:59:2E:2C:00:2D:17:C5:CA:81:78:8B:51:30:6D:60:8A:FE:52:C5

MIN ANDROID34TARGET36ARCHITECTUREarm64-v8a

04 / History

Archive history

3 versions in WIKI archive: earliest 1.1.4 (03 Jun 2026), latest 1.2sp1 (14 Oct 2026).

No change in android.permission.* between 1.2 and 1.2sp1.

05 / Version archive

Documented releases

3 TOTAL

VersionReleasedAndroidArchitecture

1.2sp114 Oct 202635+arm64-v8a→1.226 Sept 202635+arm64-v8a→1.1.403 Jun 202634+arm64-v8a→

06 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceBinary repo · izzyondroid

Permissions3 declared · 1 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessCAMERA

Declared permissions

android.permission.CAMERA android.permission.USE_BIOMETRIC app.ninesevennine.twofactorauthenticator.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

07 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗