Is Yubico Authenticator safe?

Store your unique credential on a hardware-backed security key and take it wherever you go from mobile to desktop. No more storing sensitive secrets on your mobile phone, leaving your account vulnerable to takeovers. With the Yubico Authenticator you can raise the bar for security.

Developer: Yubico
Category: Password & 2FA
Earliest archived version: 10 Jul 2026
License: Apache-2.0 (per F-Droid metadata)

02 / Package identity

Technical fingerprint

Application IDcom.yubico.yubioath

Latest APK SHA-2569cd0d4832eb3208263a0fc50177680068bfaddda5d53b36378209b42720a9948

Signing certificateD8:67:8C:5E:E2:C5:E8:F8:0D:5D:24:F6:64:D8:6E:F3:F8:ED:69:19:14:89:D5:4D:66:49:5F:76:6A:25:6D:47

MIN ANDROID24TARGET37ARCHITECTUREx86_64

03 / History

Archive history

2 versions in WIKI archive: earliest 7.4.1 (10 Jul 2026), latest 7.4.2 (12 Sept 2026).

No change in android.permission.* between 7.4.1 and 7.4.2.

04 / Version archive

Documented releases

2 TOTAL

VersionReleasedAndroidArchitecture

7.4.212 Sept 202624+x86_64→7.4.110 Jul 202624+x86_64→

05 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceOpen-source · fdroid

Permissions5 declared · 1 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessCAMERA

Declared permissions

android.permission.ACCESS_NETWORK_STATE android.permission.CAMERA android.permission.HIDE_OVERLAY_WINDOWS android.permission.NFC com.yubico.yubioath.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

06 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗