Is Pocket2FA safe?

Pocket2FA is a mobile companion for the 2FAuth self-hosted two-factor authentication web application. It generates TOTP and Steam codes locally on your device while synchronizing with your own 2FAuth server. Features Generates TOTP and Steam OTP codes locally — secrets never leave your device Encrypted storage using platform security (Android Keystore) Optional biometric authentication (fingerpri…

Developer: Germán Martín
Category: Password & 2FA
Earliest archived version: 21 Jul 2026
License: AGPL-3.0-only (per F-Droid metadata)

02 / Release notes

Release notes from F-Droid

21 Jul 2026

0.9.18

Group filter no longer resets to "All" after syncing with server - Updated Flutter SDK to 3.44.4 - Upgraded dependencies: flutter secure storage, share plus, and image picker android - Android build tools updated (Gradle 8.14, AGP 8.11.1)

Full notes →

03 / Package identity

Technical fingerprint

Application IDnet.gmartin.pocket2fa

Latest APK SHA-256977a1a4fd98ee8bd193aadecc1482f303e31a716dd21ea3db8e0b8b25b0c5f65

Signing certificateDB:47:37:B5:19:64:DE:C5:AA:E1:D6:7B:79:2D:DD:FD:77:4F:A0:2B:48:3E:39:5B:AA:4E:3B:0E:B5:28:C9:E3

MIN ANDROID24TARGET36ARCHITECTUREx86_64

04 / Version archive

Documented releases

1 TOTAL

VersionReleasedAndroidArchitecture

0.9.1821 Jul 202624+x86_64→

05 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceOpen-source · fdroid

Permissions9 declared · 4 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessCAMERAREAD_EXTERNAL_STORAGERECORD_AUDIOWRITE_EXTERNAL_STORAGE

Declared permissions

android.permission.ACCESS_NETWORK_STATE android.permission.CAMERA android.permission.INTERNET android.permission.READ_EXTERNAL_STORAGE android.permission.RECORD_AUDIO android.permission.USE_BIOMETRIC android.permission.USE_FINGERPRINT android.permission.WRITE_EXTERNAL_STORAGE net.gmartin.pocket2fa.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

06 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗