[opensourcedex]

Aegis Authenticator is a free, open source password & secret management project written in Java and released under GPL-3.0. It has 13,111 GitHub stars, 590 forks and 120 open issues, and was last pushed 12 days ago. On this registry it ranks #3 of 7 tracked projects in Password & Secret Management, with 5 head-to-head comparisons available. It gained 43 stars over the last 6 tracked days.

What is Aegis Authenticator?

What it is

Aegis Authenticator is a free and open source Android application for managing two-step verification tokens. It is written in Java and released under the GPL-3.0 license, and it belongs to the Android productivity and secret-management ecosystem.

The project solves a concrete problem for Android users who need one place to store and generate HOTP and TOTP codes for online services. It aims to provide a secure authenticator while adding features that existing authenticator apps may lack, especially encrypted vault storage and backup options.

Key capabilities

  • The vault uses AES-256-GCM encryption and unlocks with an scrypt password or Android Keystore biometrics.
  • The app supports HOTP and TOTP, so it can generate standard one-time passwords for compatible services.
  • Users can add entries by scanning a QR code, scanning a QR image, or entering details manually.
  • Aegis imports entries from 2FAS Authenticator, Authenticator Plus, Authy, andOTP, FreeOTP, FreeOTP+, Google Authenticator, Microsoft Authenticator, plain text, Steam, TOTP Authenticator, and WinAuth.
  • Vault organization includes alphabetic or custom sorting, custom or automatic icons, groups, advanced editing, and search by name or issuer.
  • Export can be plaintext or encrypted, and automatic backups can go to a user-chosen location.
  • Material design includes light, dark, and AMOLED themes, while screen capture prevention and tap to reveal protect codes.

Who uses it and how

  • Android users manage HOTP and TOTP entries for online services inside one encrypted vault.
  • Users migrating from other authenticator apps import existing entries, although some imports require root access on the device.
  • Users who want local control unlock the vault with a password or biometrics, and screen capture blocking and tap to reveal reduce accidental exposure.
  • Users who need recovery or portability create automatic backups, export the vault, and organize entries with groups, icons, and search.

Getting started

Install Aegis Authenticator from the Google Play Store or F-Droid, and use it to add, import, or back up verification entries. APK releases on Google Play and GitHub are signed with the same key and can be verified with apksigner.

When to use it — and when not to

Use Aegis when you need a free, open source Android authenticator with encrypted vault storage, standard HOTP and TOTP support, import tools, and user-controlled backups. Do not choose it when you need iOS, desktop, or hosted service support, because the app is Android-only. Also avoid it if you cannot accept that some imports require root access and that you must manage backup locations, exports, and vault unlocking yourself.

project readme (upstream, from github) — read inline

Aegis Authenticator


Build Crowdin Donate Matrix

Aegis Authenticator is a free, secure and open source 2FA app for Android. It aims to provide a secure authenticator for your online services, while also including some features missing in existing authenticator apps, like proper encryption and backups. Aegis supports HOTP and TOTP, making it compatible with thousands of services.

For a list of frequently asked questions, please check out the FAQ.

The security design of the app and the vault format is described in detail in this document.

Features

  • Free and open source
  • Secure
    • The vault is encrypted (AES-256-GCM), and can be unlocked with:
      • Password (scrypt)
      • Biometrics (Android Keystore)
    • Screen capture prevention
    • Tap to reveal
  • Compatible with Google Authenticator
  • Supports industry standard algorithms: HOTP and TOTP
  • Lots of ways to add new entries
    • Scan a QR code or an image of one
    • Enter details manually
    • Import from other authenticator apps: 2FAS Authenticator, Authenticator Plus, Authy, andOTP, FreeOTP, FreeOTP+, Google Authenticator, Microsoft Authenticator, Plain text, Steam, TOTP Authenticator and WinAuth (root access is required for some of these)
  • Organization
    • Alphabetic/custom sorting
    • Custom or automatically generated icons
    • Group entries together
    • Advanced entry editing
    • Search by name/issuer
  • Material design with multiple themes: Light, Dark, AMOLED
  • Export (plaintext or encrypted)
  • Automatic backups of the vault to a location of your choosing

Screenshots

Downloads

Aegis is available on the Google Play Store and on F-Droid.

Get it on Google Play Get it on F-Droid

Verification

APK releases on Google Play and GitHub are signed using the same key. They can be verified using apksigner:

apksigner verify --print-certs --verbose aegis.apk

The output should look like:

Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): true

The certificate fingerprints should correspond to the ones listed below:

Owner: CN=Beem Development
Issuer: CN=Beem Development
Serial number: 172380c
Valid from: Sat Feb 09 14:05:49 CET 2019 until: Wed Feb 03 14:05:49 CET 2044
Certificate fingerprints:
   MD5:  AA:EE:86:DB:C7:B8:88:9F:1F:C9:D0:7A:EC:37:36:32
   SHA1: 59:FB:63:B7:1F:CE:95:74:6C:EB:1E:1A:CB:2C:2E:45:E5:FF:13:50
   SHA256: C6:DB:80:A8:E1:4E:52:30:C1:DE:84:15:EF:82:0D:13:DC:90:1D:8F:E3:3C:F3:AC:B5:7B:68:62:D8:58:A8:23

Icon packs

Aegis supports icon packs to make it easier to assign icons to the entries in your vault. There are no official icon packs, but the community maintains a number of third-party icon packs you may want to check out. To learn how to create your own Aegis-compatible icon pack, see the documentation.

* The icons are automatically generated, so not all of them are as high quality as the ones you'll find in aegis-icons.

Contributing

Looking to contribute to Aegis? That's great! There are a couple of ways to help out. Translations, bug reports and pull requests are all greatly appreciated. Please refer to our contributing guidelines to get started.

Swing by our Matrix room to interact with other contributors: #aegis:matrix.org.

License

This project is licensed under the GNU General Public License v3.0. See the LICENSE file for details.

A couple of libraries vendored in Aegis' repository are licensed under a different license:

Frequently asked questions

Is Aegis Authenticator free to use?

Aegis Authenticator is open source under the GPL-3.0 licence. There is no licence fee and no seat count — you can self-host it or, where the project offers one, pay a vendor for a managed version instead.

What does Aegis Authenticator do?

2FA token manager for Android with encrypted vault

What is Aegis Authenticator written in?

Aegis Authenticator is primarily written in Java. Its source is publicly available at https://github.com/beemdevelopment/Aegis, and it has 13,111 GitHub stars.