← back to apps

Pocket2FA

net.gmartin.pocket2fa

android AGPL-3.0-only kind 32267

Secure 2FA code client of 2FAuth server that works offline

latest release
0.10.0 main
released 2026-10-25 14:17 UTC
download apk
net.gmartin.pocket2fa_312.apk · 25.3 MB
android-arm64-v8a vcode 312
✓ signed cert db4737b5…
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot

about

description
Pocket2FA is a mobile companion for the [2FAuth](https://github.com/Bubka/2FAuth) self-hosted two-factor authentication web application. It generates TOTP and Steam codes locally on your device while synchronizing with your own 2FAuth server. **Features** - Generates TOTP and Steam OTP codes locally — secrets never leave your device - Encrypted storage using platform security (Android Keystore) - Optional biometric authentication (fingerprint / face recognition) - Optional PIN lock (4 to 8 digits) - Real-time code refresh with countdown timer - Privacy mode: hide codes by default, reveal with long-press - One-tap copy to clipboard - Group organisation for easy browsing - Service icon support - QR code scanning (camera or gallery image) - Multiple 2FAuth server support - Shared 2FAuth accounts are clearly marked and shown as read-only **Requirements** A self-hosted instance of [2FAuth](https://github.com/Bubka/2FAuth) is required. This app does not work as a standalone 2FA manager — it is a native client that extends 2FAuth. **Disclaimer**: Independent companion app. I am not the author of 2FAuth.
publisher
78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d
first seen
2026-10-08T08:20:25.980914+00:00
last event
2026-10-25 14:17 UTC
install
zapstore.dev or any Zapstore-compatible client
topics
#password & 2fa

source & build

repository
not published
arch flags
android-arm64-v8a
manifest
not fetched yet

releases (kind 30063)

2 releases indexed; latest 0.10.0.

versionchannelreleasedevent
0.10.0 main 2026-10-25 14:17 UTC 11707807…
0.9.18 main 2026-07-21 19:06 UTC 5e3beafd…

assets & verification

Every app, release and asset event is schnorr-verified (NIP-01 id + signature) before it enters the catalog, and assets are content-addressed by sha256. We subscribe read-only to the catalog relay — never write to it.

0.10.0 — net.gmartin.pocket2fa_312.apk

sha256
be9c1f698dad5b3b3e207923bc44e29f9d3d7d975d6f58e4e4ae628f435e8a53
size
25.3 MB
archs
android-arm64-v8a
version code
312
apk cert sha256
db4737b51964dec5aae1d67b792dddfd774fa02b483e395baa4e3b0eb528c9e3
download
net.gmartin.pocket2fa_312.apk

0.9.18 — net.gmartin.pocket2fa_302.apk

sha256
a4daaebf5d4a7d5c57adedfbd15ff126a6d4ad3eda51edc4228a56e1a84940a5
size
24.3 MB
archs
android-arm64-v8a
version code
302
apk cert sha256
db4737b51964dec5aae1d67b792dddfd774fa02b483e395baa4e3b0eb528c9e3
download
net.gmartin.pocket2fa_302.apk

Showing the newest 2 asset descriptors; the full set is in /api/apps/78ce6faa…