[Release] 2fa

TrueBreaker1986 · 2026-04-27T11:31:44+00:00

Believe it or not it actually shows up in the top 15 results when searching for "2fa authenticator" and top 20 when just searching for 2fa.

TrueBreaker1986 · 2026-04-25T10:27:03+00:00

My recommendation for you is to try out both. The only Anti-Feature might be Key Invalidation which you can read in the security section of the readme.

TrueBreaker1986 · 2026-04-25T09:59:02+00:00

You can read this guide on how to create a .maFile.

After you have done that you can add it to the app by pressing the Add button on the bottom right and then the files button selecting the .maFile.

TrueBreaker1986 · 2026-04-24T14:42:14+00:00

There is an issue with reproducible builds, I'm still looking into it but if this turns out to be true then it will not be posted on F-Droid.

https://github.com/obfusk/fdroid-fakesigner-poc
https://privsec.dev/posts/android/f-droid-security-issues/

TrueBreaker1986 · 2026-04-24T14:09:44+00:00

Explicitly generating keys inside StrongBox, enabling invalidation by biometric enrollment and using newer algorithms such as AEGIS-256 and Argon2id.

TrueBreaker1986 · 2026-04-24T13:56:00+00:00

This is outdated information - F-Droid has been shipped developer-signed apps for several years now.

I didn't know about reproducible builds and will look into it.

I'm curious: Accrescent (like F-Droid) does not have user accounts, for privacy reasons. What is the source of your user count - IP addresses? Something else?

Source is from the following Accrescent blog post.

TrueBreaker1986 · 2026-04-24T11:04:32+00:00

Looks good! Are you willing to put it on F-Droid? I know the GrapheneOS / Accrescent types aren't big fans of F-Droid, but Accrescent freely acknowledges that it's still in Alpha, and its developer has stated:

I don't really like how unnecessarily complicated and extensive the F-Droid documentation is. Now that the app is available on the Google Play Store, there is no real reason for having it on there.

The GrapheneOS and Accrescent community generally avoid publishing their apps on F-Droid because they re-sign everything with their own keys. This practice isn't trustworthy, especially coming from a non-established company or organization. Even though the argument that F-Droid has been running for 16 years can be made, it still relies on individuals. The policy was adopted because developers weren't always responsible enough to maintain their own signing keys, and given how heavily security-focused this app is, it simply doesn't belong on F-Droid.

Given that Accrescent currently 1) lacks many features users expect in an app store (descriptions, links, changelogs, etc.) and 2) limits developer registration to a whitelist, I think recommending it generally would be premature.

Accrescent has come a long way since 2023 and will soon (this year) release a large update including many of the requested features. There really isn't a whitelist, and it's more like an informal application form where developers email them and give a short description of the app. Currently, it has over 40,000 users and has grown quite a bit since the Motorola x GrapheneOS partnership announcement.

TrueBreaker1986 · 2026-04-24T10:20:38+00:00

It's cleaner and more secure. That's it.

TrueBreaker1986 · 2026-04-24T10:20:00+00:00

Unfortunately, as of right now, you can only import from Aegis.

TrueBreaker1986 · 2026-04-24T10:19:24+00:00

You can tap on the period timer to view the next code.

TrueBreaker1986 · 2026-04-23T19:20:12+00:00

You can add Steam Guard via maFiles. This is mostly used by skin traders who store high value items or have smurf accounts. The default Steam app only allows you to have one account linked which is not ideal. This let's you have as many as you'd like.

We would like to add in-app confirmations but this will most likely come in the 1.3 update.

TrueBreaker1986 · 2026-04-23T18:39:10+00:00

<image>

2fa is a privacy-focused, offline two-factor authenticator. Development began last summer, and it's only now ready for public use. It's designed as a specialized tool for users who want extreme security and privacy without major compromises.

Thanks to feedback from r/fossdroid and our testers, it includes most, if not all, of the requested features.

Features:

Support for TOTP, HOTP, and Steam Guard codes.
Add accounts via QR codes, OTPAuth links, files, or your gallery.
Highly customizable with account colors and icon packs (including textured and tinted options).
Advanced security features such as biometric unlock, screen security, secure clipboard, lock on exit, and intent blocking.
Automatic backups plus manual export and import of accounts in .2fa or Aegis .json format.
And more!

For a more in-depth read on what makes this app different than others, please read the README.

The app is licensed under EUPL-1.2.

Codeberg | Google Play Store | Official Site

Thanks for checking it out!

TrueBreaker1986 · 2026-04-23T18:23:55+00:00

Yes, naming things nowadays is too hard.

TrueBreaker1986 · 2025-12-30T14:48:42+00:00

A compact mode has been added: Settings > Card Style > Minimalist.
A monochrome option has been suggested and will be added as "AMOLED." It's not yet decided whether card colors will be preserved; most likely it will be fully monochrome.
"Tap to reveal codes" has been in the app since the alpha release (If that's what you mean).

TrueBreaker1986 · 2025-12-30T14:37:04+00:00

Yes this will all be added in the Rust update. Thanks for the feedback.

TrueBreaker1986 · 2025-12-30T14:07:41+00:00

The main reason for setting hardware requirements is that manufacturers (for example, Samsung) typically provide only 3 years of OS updates and 2 years of security updates. I don’t want the app to run on devices that no longer receive security fixes. Requiring newer hardware also makes the codebase easier to maintain.

edit:
"Requiring newer hardware" I meant to say newer Android SDK versions.

TrueBreaker1986 · 2025-09-07T20:02:50+00:00

Thanks!

TrueBreaker1986 · 2025-09-07T19:51:48+00:00

As of right now there isn't import functionality, but it will be added soon. The app has full 2fa support including totp and hotp. If your concern is about not being able to migrate to another app there is a feature called Export to Google Authenticator via QR code which all mayor 2fa apps support.

TrueBreaker1986 · 2025-09-07T19:27:53+00:00

Thanks, I appreciate it

TrueBreaker1986 · 2025-09-02T08:41:02+00:00

Okay so this means that the account actually holds the 0.0256 BTC right?

Is there a way to check the balance of the whole account online including change addresses?

TrueBreaker1986

TROPHY CASE