Proton Authenticator works on mobile and desktop without an account. This review verifies E2EE sync, exports, offline use, and limits.
Best for: People who want a free, open-source authenticator on both mobile and desktop
Not for: Users who prefer a strictly local Android vault with no optional cloud component
Price: Free
- ✓ Works without creating a Proton account
- ✓ Optional end-to-end encrypted cross-device sync
- ✓ Native mobile and desktop apps
- ✓ Direct import and export
- ✓ Offline code generation and biometric unlock
- − Cross-device sync requires a Proton account
- − A newer product with a shorter track record than long-established rivals
- − Desktop access expands the number of devices that must be secured
What Proton Authenticator is
Proton Authenticator is a free, standalone, open-source TOTP app launched on July 31, 2025. It is available on iOS, Android, Windows, macOS, and Linux. That platform list matters because the earlier version of this review incorrectly described it as a 2024 mobile-only product.
You do not need a Proton account for local use. Signing in is optional and enables end-to-end encrypted synchronization across devices. Codes continue to work offline because TOTP generation happens locally.
This August 1, 2026 review checks Proton’s current product page, launch announcement, and support documentation. It is not an independent code or cryptography audit.
What we verified
| Claim | Current status | Primary source |
|---|---|---|
| Launch date | Announced July 31, 2025 | Proton launch announcement |
| Platforms | iOS, Android, Windows, macOS, and Linux | Proton Authenticator product page |
| Account requirement | No account is needed for local use; a Proton account enables sync | Proton product FAQ |
| Portability | Direct import and export are supported | Proton product comparison |
| Offline access | Codes remain available without an internet connection | Proton product page |
The previous article included unsupported low-level claims about specific key derivation and encryption algorithms. Those details have been removed. The defensible product-level claim is end-to-end encrypted sync, as documented by Proton.
Local use, sync, and recovery
For local-only use, install the app and add tokens without signing in. This avoids an account dependency while preserving normal offline TOTP behavior. If you want codes on several devices, sign in to a Proton account and enable encrypted sync.
Optional sync changes the recovery model. Protect the Proton account with strong recovery methods that do not depend solely on the authenticator vault. Keep each service’s recovery codes separately, and export the vault to an additional secure location before changing devices.
Proton also supports direct export, which makes it easier to leave than Authy. Exported authenticator data is highly sensitive. Store it encrypted, do not email it to yourself, and remove temporary copies after verifying the destination app.
Desktop support is useful, with a trade-off
Native desktop apps are Proton Authenticator’s clearest differentiator. They remove the need to reach for a phone during desktop logins and make the product a closer replacement for the discontinued Authy Desktop apps.
Every synchronized computer also becomes part of the threat model. Use full-disk encryption, automatic screen locking, current OS patches, and a strong local login. A desktop authenticator on a shared or unmanaged computer is usually a poor trade.
The app supports biometric unlocking where the platform provides it, plus search and a next-code preview. Those are usability features, not substitutes for device security or service recovery codes.
Proton Authenticator compared
| App | Desktop | Account-free local use | Encrypted sync | Direct export |
|---|---|---|---|---|
| Proton Authenticator | Yes | Yes | Optional with Proton account | Yes |
| Ente Auth | Yes | Sync-centered account model | Yes | Encrypted export |
| Authy | No | No | Yes | No supported bulk export |
| Aegis | No, Android only | Yes | No built-in cloud sync | Yes |
Proton is the broadest fit when desktop access and an optional account both matter. Ente Auth is a strong alternative for users who prefer its encrypted account and web access. Aegis remains attractive for a local Android vault.
Verdict
Proton Authenticator is now one of the easiest general recommendations in this category. It combines mobile and desktop apps, offline operation, optional encrypted sync, open-source code, and direct exports without charging for the authenticator.
Its shorter product history is the main reason to remain disciplined: keep independent recovery codes and periodic exports. With those safeguards, it is a better new-user choice than Authy for most people who need cross-platform access.
Frequently asked questions
Do I need a Proton account?
No. Proton Authenticator can be used locally without an account. A Proton account is optional and enables encrypted synchronization between devices.
Does Proton Authenticator have desktop apps?
Yes. Proton lists Windows, macOS, and Linux alongside iOS and Android.
Does it work offline?
Yes. Configured devices generate TOTP codes locally without an internet connection. Connectivity is needed for cross-device synchronization and account operations.
Can I export my codes?
Yes. Proton supports direct import and export. Handle exported files as secrets and keep them in encrypted storage.
When was Proton Authenticator launched?
Proton announced the standalone authenticator on July 31, 2025.
