Authy killed its desktop app, which is why you're reading this. The good news: the best replacements are free and open source. The choice comes down to how you want your 2FA codes to sync — or not.
| Cost | Sync | Platforms | |
|---|---|---|---|
| Aegis | free, open source | none — local encrypted vault, no account | Android only |
| Ente Auth | free (Explorer $5/mo for cloud storage) | end-to-end encrypted, cross-platform | Android, iOS, desktop, web |
| 2FAS | free, open source | via your own iCloud / Google Drive | Android, iOS, browser extensions |
Aegis is the maximalist choice: no cloud, no account, an encrypted vault on your device and nothing else. Best-in-class privacy — but Android only, and if you lose your phone, recovery is genuinely painful.
Ente Auth solves exactly that pain. It's the only app here with true end-to-end encrypted sync across iOS, Android and desktop — log in on a new device and your codes are there, still encrypted. It's open source, MIT-licensed, and has a Cure53 audit behind it. The core app is free; you only pay ($5/mo) if you also want Ente's photo/file storage.
2FAS is the zero-fuss pick: open source, no account, syncs through iCloud or [Google](/entry/yubikey-vs-google-titan-vs-solokeys-what-hardware-2fa-actually-costs) Drive if you already use them, and its browser extension makes approving codes on a laptop the easiest of the bunch.
For most people migrating off Authy in 2026: Ente Auth, for the cross-platform encrypted sync and the recovery story. 2FAS if you want no account at all and already back up through iCloud/Drive. Aegis if you're Android-only and want the tightest possible privacy and can live with harder recovery. ([Microsoft](/entry/crowdstrike-vs-sentinelone-vs-microsoft-defender-for-endpoint-edr-pricing-per-en) Authenticator is a reasonable non-open-source fallback — actively maintained, no phone number required, cloud backup.)