Why Ente Auth Exists
Ente Auth is a free, open source authenticator app built by the same team behind Ente Photos, an end to end encrypted alternative to Google Photos. The photos app came first. Auth was released later, using the exact same encryption pipeline the company had already built and had audited. That lineage matters, because it means Ente Auth is not a side project bolted onto a marketing site. It is a second product built on infrastructure the company already trusted with people's private photo libraries.
The core idea is simple to state and surprisingly hard to find elsewhere: your TOTP secrets sync across every device you own, and Ente's servers never see them in plain form. Google Authenticator syncs through your Google account without end to end encryption on the secrets themselves. Aegis, a well regarded Android app, does not sync at all unless you manually export and import a file yourself. Ente Auth sits in between: real multi device sync, with the encryption keys never leaving your control.
How the Sync Actually Works
When you create an Ente account, the app derives an encryption key from your password using a key derivation function on your device. That key never gets transmitted. Each TOTP secret you add is encrypted locally with that key before it is ever sent to Ente's servers. What lands on the server is ciphertext, meaningless without the key.
When you log in on a second device, phone, laptop, or the web app, you authenticate and then the encrypted blob downloads and decrypts locally using the key derived from the password you just typed. No decrypted secret ever transits the network or sits readable on Ente's disks. This is the same model used by password managers built around zero knowledge architecture, applied here to two factor codes instead of passwords.
The practical result: install the app on a new phone, sign in, and your entire list of accounts appears within seconds, generating the same codes your old phone was generating. Lose the old phone entirely and nothing is lost, because the sync already happened.
Platform Coverage
- iOS and iPadOS: native app, biometric lock, widgets.
- Android: native app, including support for older devices that some competitors have dropped.
- Windows, macOS, and Linux: genuine desktop apps, not just a browser tab pinned to look like one.
- Web: a browser based client for anyone who wants access without installing anything.
This breadth is unusual. Most authenticator apps treat desktop as an afterthought or skip it entirely. Authy used to fill this niche with a genuinely good desktop client, then discontinued desktop support, which left a gap that Ente Auth quietly stepped into.
Importing From Somewhere Else
Ente Auth reads the standard export formats you would expect: Google Authenticator's QR based transfer format, 2FAS exports, Aegis JSON backups, Bitwarden exports, and raw otpauth:// URIs. Migration in either direction is a solved problem, which matters because lock in is exactly what you want to avoid with anything holding your account security. Ente also exports its own encrypted backup file, so you are never stuck if you decide to leave later.
If you are moving away from Google Authenticator specifically, the process is: open Google Authenticator, use its built in export feature to generate a transfer QR code, then scan that QR code inside Ente Auth's import flow. The codes themselves are standard TOTP under the hood in every app, which you can verify yourself by generating a code for the same secret in our browser based TOTP generator and confirming it matches.
Details That Add Up
A few smaller touches separate a well built authenticator from a merely functional one:
- Next code preview: during the last few seconds of a 30 second window, the app shows you the upcoming code alongside the current one, so a slow login does not force you to wait for a fresh cycle.
- Search and tagging: useful once your list passes 20 or 30 accounts, which happens faster than people expect.
- Custom icons: makes visual scanning faster than reading account names.
- Offline mode: you can use Ente Auth entirely without an account. Codes generate locally from the stored secret regardless of network state; the account and sync layer is additive, not a requirement to function.
Where It Falls Short
End to end encryption is a trade, not a free upgrade, and the trade is worth stating plainly.
- Recovery is entirely on you. Because Ente's servers cannot read your data, they also cannot reset your password and hand your data back the way a normal web service can. You are given a recovery key at signup. If you lose both your password and that recovery key, the encrypted sync data is gone. Not delayed, not recoverable through support, gone. The fix is procedural: store the recovery key in your password manager the same day you create the account.
- Younger company, shorter track record. Ente is a smaller team than Google or Yubico, with fewer years in the field. The code is open source and has been through external audits, which is the correct mitigation, but it is still a bet on a newer vendor rather than an incumbent.
- An account is required for sync to work at all. If you want the multi device benefit, you are creating one more identity to manage, on top of everything else in your life.
- No browser autofill of codes. Password managers with built in TOTP support can autofill the code directly into a login form. Ente Auth requires you to open the app or web client and copy the code, which the desktop apps make quick but not invisible.
Ente Auth vs Aegis vs Authy
Aegis is excellent if you want an Android only tool with zero cloud dependency and full manual control over backups. It will never sync automatically, by design, which some people consider a feature rather than a limitation. Authy pioneered convenient multi device sync years ago but its encryption model is not end to end in the same sense, and the company has since discontinued its desktop application, shrinking its platform coverage. Ente Auth is closer to what Authy's sync model would look like if it were rebuilt today with a zero knowledge architecture and full desktop parity. For a closer breakdown of Aegis specifically against another popular option, see our Aegis vs 2FAS comparison, and for iPhone specific picks see our iPhone authenticator roundup.
Who Should Actually Use This
Ente Auth makes the most sense if any of these describe you: you regularly switch between a phone and a desktop and want codes available on both without manual copying, your household mixes iOS and Android devices and you want one app that works identically on all of them, or you were an Authy user and have been looking for a real replacement rather than a downgrade. If none of that applies and you are happy with a single Android device and manual backups, Aegis remains a perfectly reasonable, slightly simpler choice.
Whichever authenticator you land on, keep the fundamentals in place regardless: store per site backup codes somewhere durable and offline, following the practice in our guide to storing backup codes safely, so that losing any single app or device is never a lockout event.
Verdict
Recommended, with the recovery key caveat taken seriously. Ente Auth delivers something genuinely rare: real end to end encrypted sync, real desktop apps on every major platform, open source code that has been audited, and a free tier with no feature gates as of this review. The one setup step that determines whether it is bulletproof or a future headache is simple: the moment you create an account, copy the recovery key into your password manager before you do anything else.
Frequently Asked Questions
What happens to my codes if Ente the company shuts down?
Your codes keep working regardless, because TOTP generation is pure offline math that does not depend on Ente's servers being online. The app itself will keep generating correct codes from the secrets already stored on your device. The open source codebase also means the software can outlive the company; the real risk in a shutdown scenario is losing the sync convenience going forward, not losing access to codes you already have.
Is the authenticator really free with no catch?
As of this review, yes, with no entry limits and no feature paywall. Ente's stated business model is that Auth is a trust building companion to its paid photo storage product, sharing the same account and infrastructure. It is worth glancing at their pricing page occasionally since business models can shift, but there is nothing hidden at signup.
Can Ente employees see my two factor secrets?
Not by design. Encryption and decryption happen on your device using a key derived from your password, and the server only ever stores the encrypted result. The architecture is documented publicly and has been reviewed by outside auditors. The honest caveat with any such claim is that you are trusting the published design matches what actually ships, which is precisely what open source code lets independent parties verify.
What exactly happens during account recovery?
Signing in on a new device requires your password, and depending on your account settings, your recovery key as well. Enter those correctly and your encrypted data downloads and decrypts as normal. The failure case is losing both the password and the recovery key at once, at which point the encrypted sync data cannot be recovered by anyone, including Ente support, which is why the recovery key needs a safe, separate home from day one.
Should I switch from Google Authenticator to Ente Auth?
If cross platform sync or end to end encryption matter to you, switching is worthwhile and takes only a few minutes using Google Authenticator's built in export QR code, covered in our guide to transferring Google Authenticator to a new phone. If you are already comfortable with Google's sync model and have no multi platform needs, switching is a nice to have rather than an urgent fix.
