# Alternatives to Yubico Authenticator

TOTP stored on your YubiKey.

Yubico Authenticator ranks #10 of 10 in Authenticator apps, with an Alt Score of 40. It is licensed under Apache-2.0, free and available on iOS, Android, Windows, macOS and Linux. 9 of 9 checklist rows are verified against a public source.

Source: https://altcatalog.com/alternatives/yubico-authenticator/
Category: Authenticator apps

## Overview

- **Who it's for**: People and organizations who already use (or want to use) a YubiKey and want to move their 2FA/TOTP secrets off their phone or password manager onto dedicated hardware, for stronger protection against phishing and malware.
- **What you get**: A free companion app for Windows, macOS, Linux, iOS, and Android that manages TOTP/HOTP accounts stored on a YubiKey rather than on the device itself. Credentials live in the YubiKey's secure element and can't be extracted, and the same key can be used across multiple computers or phones. Setup is via QR code scanning, and the app lets you view, add, rename, and delete accounts on the key.
- **How it works**: You register an account by scanning its QR code, which writes the secret to the YubiKey (over USB or NFC) rather than to the app. To get a code, you connect or tap the YubiKey to your device and the app reads the current TOTP/HOTP code from it, so codes are only generated while the physical key is present.

## Profile

- **License**: Apache-2.0 (verified 2026-07-11)
- **Pricing model**: Free (verified 2026-07-11)
- **Starts at**: ?
- **Platforms**: iOS, Android, Windows, macOS, Linux
- **Status**: active (verified 2026-07-11)

## Ranked alternatives

| # | App | Alt Score | Licence | Platforms |
|---|-----|-----------|---------|-----------|
| 1 | [2FAS](https://altcatalog.com/alternatives/2fas.md) | 85 | GPL-3.0 | iOS, Android, Browser extension |
| 2 | [Stratum](https://altcatalog.com/alternatives/stratum.md) | 75 | GPL-3.0 | Android |
| 3 | [Ente Auth](https://altcatalog.com/alternatives/ente-auth.md) | 70 | AGPL-3.0 | iOS, Android, Windows, macOS |
| 4 | [Aegis Authenticator](https://altcatalog.com/alternatives/aegis-authenticator.md) | 60 | GPL-3.0 | Android |
| 5 | [Authy](https://altcatalog.com/alternatives/authy.md) | 55 | Proprietary | iOS, Android |
| 6 | [Duo Mobile](https://altcatalog.com/alternatives/duo-mobile.md) | 55 | Proprietary | iOS, Android |
| 7 | [FreeOTP](https://altcatalog.com/alternatives/freeotp.md) | 55 | Apache-2.0 | iOS, Android |
| 8 | [Google Authenticator](https://altcatalog.com/alternatives/google-authenticator.md) | 55 | Proprietary | iOS, Android |
| 9 | [Microsoft Authenticator](https://altcatalog.com/alternatives/microsoft-authenticator.md) | 45 | Proprietary | iOS, Android |

Alt Score = Verified coverage (90%) + Visibility (10%). See https://altcatalog.com/how-alt-score-works/

## Feature comparison

Legend: Yes / No / Partial / ? (not verified).

| Authenticator apps checklist | Yubico Authenticator | 2FAS | Stratum | Ente Auth | Aegis Authenticator | Authy |
|---|---|---|---|---|---|---|
| Pricing model | Free | Free | Free | Free | Free | Free |
| Starts at | ? | ? | ? | ? | ? | ? |
| License | Apache-2.0 | GPL-3.0 | GPL-3.0 | AGPL-3.0 | GPL-3.0 | Proprietary |
| Platforms | iOS, Android, Windows, macOS, Linux | iOS, Android, Browser extension | Android | iOS, Android, Windows, macOS, Linux, Web | Android | iOS, Android |
| TOTP | Yes | Yes | Yes | Yes | Yes | Yes |
| Encrypted backup | No | Yes | Yes | Yes | Yes | Yes |
| Multi-device sync | Partial | Yes | Partial | Yes | No | Yes |
| Browser extension | No | Yes | ? | No | No | No |
| Apple Watch / Wear OS | No | Partial | Yes | No | No | Partial |
| Import from other apps | Partial | Yes | Yes | Yes | Yes | No |
| Export allowed | No | Yes | Yes | Yes | Yes | No |
| Open source | Yes | Yes | Yes | Yes | Yes | No |
| Push-based approvals | No | ? | ? | ? | No | Yes |

## Sources

Sources for Yubico Authenticator. Each alternative is sourced on its own page.

- **License**: Apache-2.0 — <https://github.com/Yubico/yubioath-flutter/blob/main/LICENSE> (verified 2026-07-11)
  - Quote: “Apache License”
- **Pricing model**: Free — <https://apps.apple.com/us/app/yubico-authenticator/id1476679808> (verified 2026-07-11)
  - Quote: “Free”
- **Platforms**: iOS, Android, Windows, macOS, Linux — <https://www.yubico.com/products/yubico-authenticator/> (verified 2026-07-11)
  - Quote: “The Yubico Authenticator app works across Windows, macOS, Linux, iOS and Android.”
- **Status**: active — <https://github.com/Yubico/yubioath-flutter/releases> (verified 2026-07-11)
  - Quote: “Maintenance release with updated dependencies.”
- **TOTP**: Yes — <https://docs.yubico.com/software/yubikey/tools/authenticator/auth-guide/oath.html> (verified 2026-07-11)
  - Quote: “TOTPs are generated by hashing a secret key, current time, period, and length value with a hashing algorithm.”
- **Encrypted backup**: No — <https://docs.yubico.com/yesdk/users-manual/application-oath/oath-backup-credentials.html> (verified 2026-07-11)
  - Quote: “Secrets on a YubiKey are, by design, write-only objects.”
- **Multi-device sync**: Partial — <https://docs.yubico.com/software/yubikey/tools/authenticator/auth-guide/oath.html> (verified 2026-07-11)
  - Quote: “Once an account is registered with a YubiKey, the OTPs for that account can be generated via Yubico Authenticator on ANY device.”
- **Browser extension**: No — <https://www.yubico.com/products/yubico-authenticator/> (verified 2026-07-11)
  - Quote: “The Yubico Authenticator app works across Windows, macOS, Linux, iOS and Android.”
- **Apple Watch / Wear OS**: No — <https://apps.apple.com/us/app/yubico-authenticator/id1476679808> (verified 2026-07-11)
  - Quote: “Requires iOS 16.0 or later.”
- **Import from other apps**: Partial — <https://docs.yubico.com/software/yubikey/tools/authenticator/auth-guide/oath.html> (verified 2026-07-11)
  - Quote: “Also note that QR codes from Google Authenticator are only compatible with the desktop and Android versions of Yubico Authenticator–if you try to scan the QR code with Yubico Authenticator for iOS/iPa”
- **Export allowed**: No — <https://docs.yubico.com/yesdk/users-manual/application-oath/oath-backup-credentials.html> (verified 2026-07-11)
  - Quote: “Secrets on a YubiKey are, by design, write-only objects.”
- **Open source**: Yes — <https://github.com/Yubico/yubioath-flutter/blob/main/LICENSE> (verified 2026-07-11)
  - Quote: “Apache License”
- **Push-based approvals**: No — <https://github.com/Yubico/yubioath-flutter> (verified 2026-07-11)
  - Quote: “Manage and access OATH one-time passwords stored securely on your YubiKey.”

---
Ranked by verified data, never by who paid. https://altcatalog.com/trust/