SafeKey
An Android authenticator that keeps TOTP accounts in an encrypted local vault, with biometric lock, QR transfer, and recovery-code organization.
Project overview
About SafeKey
SafeKey is an Android authenticator for generating standards-based time-based one-time passwords. Accounts are stored on-device in a SQLCipher-encrypted database, with the encryption key protected by Android secure storage. It supports biometric app lock, QR and Google Authenticator migration imports, QR export, account tags, pinning, and recovery-code tracking. Network access is limited to checking GitHub releases and installing updates; authentication data is not synced to an ARCn account or analytics service.
Capabilities
What SafeKey does
Standards-based TOTP
Generates 6- or 8-digit TOTP codes using SHA-1, SHA-256, or SHA-512 from compatible authenticator secrets.
Encrypted local vault
Stores accounts in a SQLCipher-encrypted SQLite database with its key protected by Android secure storage.
Biometric app lock
Uses the device authentication system to keep the authenticator vault behind an optional biometric lock.
QR import and export
Scans standard otpauth QR codes, imports Google Authenticator migrations, and exports accounts in manageable QR groups.
Account organization
Adds tags, pinning, sorting, and search so frequently used accounts stay easy to find.
Recovery-code tracking
Keeps recovery codes alongside the relevant account and records which codes have already been used.
Project links
Continue with SafeKey
Visit the SafeKey website or inspect the Flutter source and release history on GitHub.