New in version 1.7.0
* New: a redesigned interface built on Material 3 Expressive, with bolder titles, grouped cards, and smoother motion throughout the app.
* New: optional password reminder that asks you to type your vault password now and then so you don't forget it, spacing the prompts further apart over time. Default enabled
* New: Russian support
* Improved: exporting a backup and starting a device transfer now require unlocking the vault first.
* Fixed: navbar in onboarding no longer overlap the system bars.
Tokn is a small, privacy-first 2FA / MFA authenticator. Your one-time codes stay on your device, encrypted. No accounts, no cloud sync, no analytics, no ads.
A simple, open-source TOTP / HOTP authenticator for people who do not want their second factor in someone else's cloud.
WHY TOKN
• Private by design. No sign-up, no telemetry, and no Google Play Services on your device.
• Encrypted vault. Stored in an SQLCipher database, unlocked with biometrics (fingerprint or face) or a password.
• Works fully offline. Codes are generated locally on your phone.
• Open source. GPL-3.0, source available on GitHub, also published on F-Droid.
FEATURES
• TOTP and HOTP support per RFC 6238 and RFC 4226
• SHA-1, SHA-256 and SHA-512
• Add accounts by scanning a QR code with the camera or from a gallery image
• Manual entry for codes you cannot scan
• Biometric unlock with password fallback
• Encrypted backup and restore for moving to a new phone or keeping a copy
• Device-to-device sync over local Wi-Fi, Wi-Fi Direct or animated QR code. Nothing leaves your network and the handshake is end-to-end encrypted
• Organize accounts with custom groups, multiple groups per account
• Custom icons and importable icon packs (Aegis-compatible)
• Material 3 design with light, dark or system theme and optional Material You colors
• Screenshot protection keeps codes out of the recents preview and blocks screen capture
SWITCHING FROM ANOTHER 2FA APP
Tokn imports backups from Aegis, 2FAS, Google Authenticator and standard otpauth:// URIs. Bring your existing accounts over in minutes.
WORKS WITH
Any service that supports standard TOTP or HOTP two-factor authentication. Google, GitHub, GitLab, Microsoft, Amazon, Discord, Twitch, Reddit, Dropbox, Proton, and thousands more.
LICENSE
Tokn is free software, released under the GNU General Public License v3.0 or later.
Source code, releases and issue tracker:
https://github.com/fthomys/tokn
Versions
Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.
Download F-Droid
-
arm64-v8a
armeabi-v7a
x86
x86_64
This version requires Android 8.0 or newer.
It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.
Permissions
-
access precise location only in the foreground
This app can get your precise location from location services while the app is in use. Location services for your device must be turned on for the app to get location. This may increase battery usage.
-
view network connections
Allows the app to view information about network connections such as which networks exist and are connected.
-
view Wi-Fi connections
Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices.
-
take pictures and videos
This app can take pictures and record videos using the camera while the app is in use.
-
allow Wi-Fi Multicast reception
Allows the app to receive packets sent to all devices on a Wi-Fi network using multicast addresses, not just your phone. It uses more power than the non-multicast mode.
-
connect and disconnect from Wi-Fi
Allows the app to connect to and disconnect from Wi-Fi access points and to make changes to device configuration for Wi-Fi networks.
-
have full network access
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
-
interact with nearby Wi-Fi devices
Allows the app to advertise, connect, and determine the relative position of nearby Wi-Fi devices
-
use biometric hardware
Allows the app to use biometric hardware for authentication
-
use fingerprint hardware
Allows the app to use fingerprint hardware for authentication
-
me.diamondforge.tokn.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK
13 MiB
PGP Signature
|
Build Log
New in version 1.6.3
* New: show the upcoming code beneath the current one. Enable it under Settings > App behavior.
* New: App behavior settings screen gathers tap-to-copy and show-next-code in one place.
* Improved: cleaner vault list with adjusted font sizes, account count, and bottom spacing.
-
arm64-v8a
armeabi-v7a
x86
x86_64
This version requires Android 8.0 or newer.
It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.
Permissions
-
access precise location only in the foreground
This app can get your precise location from location services while the app is in use. Location services for your device must be turned on for the app to get location. This may increase battery usage.
-
view network connections
Allows the app to view information about network connections such as which networks exist and are connected.
-
view Wi-Fi connections
Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices.
-
take pictures and videos
This app can take pictures and record videos using the camera while the app is in use.
-
allow Wi-Fi Multicast reception
Allows the app to receive packets sent to all devices on a Wi-Fi network using multicast addresses, not just your phone. It uses more power than the non-multicast mode.
-
connect and disconnect from Wi-Fi
Allows the app to connect to and disconnect from Wi-Fi access points and to make changes to device configuration for Wi-Fi networks.
-
have full network access
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
-
interact with nearby Wi-Fi devices
Allows the app to advertise, connect, and determine the relative position of nearby Wi-Fi devices
-
use biometric hardware
Allows the app to use biometric hardware for authentication
-
use fingerprint hardware
Allows the app to use fingerprint hardware for authentication
-
me.diamondforge.tokn.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK
13 MiB
PGP Signature
|
Build Log
New in version 1.6.2
* Fix: corrected Chinese language mapping.
-
arm64-v8a
armeabi-v7a
x86
x86_64
This version requires Android 8.0 or newer.
It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.
Permissions
-
access precise location only in the foreground
This app can get your precise location from location services while the app is in use. Location services for your device must be turned on for the app to get location. This may increase battery usage.
-
view network connections
Allows the app to view information about network connections such as which networks exist and are connected.
-
view Wi-Fi connections
Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices.
-
take pictures and videos
This app can take pictures and record videos using the camera while the app is in use.
-
allow Wi-Fi Multicast reception
Allows the app to receive packets sent to all devices on a Wi-Fi network using multicast addresses, not just your phone. It uses more power than the non-multicast mode.
-
connect and disconnect from Wi-Fi
Allows the app to connect to and disconnect from Wi-Fi access points and to make changes to device configuration for Wi-Fi networks.
-
have full network access
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
-
interact with nearby Wi-Fi devices
Allows the app to advertise, connect, and determine the relative position of nearby Wi-Fi devices
-
use biometric hardware
Allows the app to use biometric hardware for authentication
-
use fingerprint hardware
Allows the app to use fingerprint hardware for authentication
-
me.diamondforge.tokn.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK
13 MiB
PGP Signature
|
Build Log
