2FA Authenticator: Moat

Moat keeps your two-factor codes and passwords behind a moat — encrypted on your device, and end-to-end encrypted in the cloud. No tracking. No ads. No one can read them but you.

WHY MOAT

• Generate 2FA codes (TOTP & HOTP) for thousands of services — Google, GitHub, Apple, Microsoft, Instagram and more

• End-to-end encrypted backup & sync across your devices — secrets are encrypted on-device with AES-256-GCM before they ever leave

• Zero-knowledge by design: we have no ability to read your codes or passwords

• Your codes on Apple Watch — a glance at your wrist

• A full Mac app — one subscription across iPhone, iPad, Watch and Mac

• An optional vault for passwords AND API keys, stored in the system Keychain and revealed only after Face ID or Touch ID

• Password breach monitoring — know if a saved login appears in a known data breach, checked privately so your password never leaves your device (Pro)

• Switch from Google Authenticator in one scan — import otpauth links and photos too

• Four hand-crafted app icons, light/dark themes, folders and instant search

• Home Screen widgets and AutoFill for one-time codes

• Works offline. No account required.

SECURITY YOU CAN VERIFY

Codes follow the open TOTP (RFC 6238) and HOTP (RFC 4226) standards. Keys are derived from your recovery key with PBKDF2-SHA256 (210,000 iterations). Lose the recovery key and not even we can restore your data — that's the point.

FREE & PRO

Use Moat free with up to 10 accounts and a built-in vault for 20 passwords and API keys. Go Pro for unlimited accounts and vault items, password breach monitoring, live codes on Apple Watch, and end-to-end encrypted backup & sync across your devices.

Moat Pro is an auto-renewing subscription, available as a weekly or annual plan, with a free trial on eligible plans. Payment is charged to your Apple ID at confirmation of purchase. It renews automatically unless turned off at least 24 hours before the end of the current period; manage or cancel anytime in your App Store account settings. Any unused portion of a free trial is forfeited when you purchase a subscription.

Terms: https://auth-2fa.cloud/terms.html

Privacy: https://auth-2fa.cloud/privacy.html