Tofu

A minimal, free and open-source authenticator for iPhone that keeps codes in the iOS keychain with no cloud.

Verified facts: 4 of 4
Alternatives ranked: 4
Approved reviews: 0
Visits sent from here: 0

About Tofu

Tofu is a small, no-frills two-factor app for iPhone. It generates TOTP and HOTP codes with SHA-1, SHA-256 or SHA-512, works fully offline (even in airplane mode), and stores account secrets in the iOS keychain. There are no accounts, ads, analytics or cloud sync. It is free software under the permissive ISC licence, with its source on GitHub. The trade-off of that simplicity is backup: accounts are only included in encrypted local iPhone backups made with a Mac or PC, and the developer notes they do not migrate when restoring from an iCloud backup, so you must keep your services' recovery codes safe or re-enrol accounts when you change phones. Development is slow and the app is iPhone only, with no Android, Mac or Watch version. It suits people who want the smallest possible authenticator and are disciplined about recovery codes; most others will be better served by an app with encrypted sync or export.

Best for: iPhone users who want a tiny, offline authenticator and manage recovery codes themselves.

What works

Free and open source under the ISC licence
Fully offline with secrets in the iOS keychain
No accounts, ads or tracking

Why people leave

Codes do not move with iCloud backups
iPhone only
Infrequent updates

Top Tofu alternatives

See all 4

1
2FAS Auth
Free, open source and offline-first, with optional iCloud backup.
66.5
2
Step Two
Polished iPhone and Mac app with iCloud sync.
62.6
3
Ente Auth
Open source with encrypted sync if you want codes to survive a lost phone.
59.6
4
Proton Authenticator
Free, open source, with encrypted backups and Apple Watch support.
57.2

Why people left Tofu

In reviewers' own words, from reviews of the apps they moved to. These are their opinions, not ours.

No switching stories yet. If you moved away from Tofu, review the app you switched to and tell us why.

Reviews

No approved reviews yet. How we verify reviewers

Write a review of Tofu

Your rating of Tofu

Name

Never shown publicly. A work email helps us verify you.

Title

Your review

What did you use it for, and what was good or bad? At least 40 characters.

Did you switch from another app?

Why did you leave it?

How can we verify you use it? (optional)

A GitHub username, your company domain, or say you can send a screenshot. Verified reviews count more.

I received money, credit or a gift for writing this review. (Incentivized reviews are shown but don't count toward rankings.)

By submitting, you confirm you're at least 16 and agree to our terms. Your name, rating, review and the date are published; your email isn't. See our privacy policy.

Tofu: common questions

Is Tofu free?

Yes. Tofu is free, open-source software.

Is Tofu open source?

Yes. The source code is on GitHub at iKenndac/Tofu.

What platforms does Tofu run on?

Tofu is available for iOS.

What are the best alternatives to Tofu?

The highest-ranked Tofu alternatives right now are 2FAS Auth, Step Two and Ente Auth. See the full ranked list for pricing, platforms and verified facts.

See all 4 Tofu alternatives

Tofu facts

4 of 4 verified

License: ISC; Checked Oct 25, 2026github.com(opens source in a new tab); “License: ISC (ISC License).”
Offline: Yes, works in airplane mode; Checked Oct 25, 2026tofuauth.com(opens source in a new tab); “Offline Requires no network or cellular connection and can be used in airplane mode.”
Storage: iOS keychain; Checked Oct 25, 2026tofuauth.com(opens source in a new tab); “Security All your account details are safely stored in the iOS keychain.”
iCloud backup restore: Not supported; Checked Oct 25, 2026tofuauth.com(opens source in a new tab); “Tofu's accounts will not migrate to a new iPhone, when restoring from an iCloud backup.”