FreeOTP+

about

description

FreeOTP+ adds a second layer of security for your online accounts. This works by generating one-time passwords (OTP) on your mobile devices which can be used in conjunction with your normal password to make your login nearly impossible to hack. These passwords can be generated even when your phone is in airplane mode. Tokens can be added easily by scanning a QR-code or by manually entering the token configuration. This is called two-factor authentication (2FA). FreeOTP works with many of the great online services you already use, including Google, Facebook, Evernote, GitHub and many more! FreeOTP also may work for your private corporate security if they implement the standardized <a href="https://en.wikipedia.org/wiki/Time-based_one-time_password">TOTP</a> or <a href="https://en.wikipedia.org/wiki/HMAC-based_one-time_password_algorithm">HOTP</a> protocols. This includes great enterprise solutions like <a href="https://www.freeipa.org/">FreeIPA</a>. <b>Features:</b> <ul> <li>Scan QR code.</li> <li>Export and import settings to Google Drive or other document providers.</li> <li>Material design with dark theme support.</li> <li>Search bar to search token.</li> <li>See token details.</li> <li>Option to require Biometric / PIN authentication to launch the app.</li> <li>Heuristic based offline icon for tokens of 250+ websites.</li> <li>Many settings to customize the app functionality.</li> </ul> The FreeOTP Plus is fork of the FreeOTP.

publisher

78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d

first seen

2026-10-08T21:20:12.570562+00:00

last event

2026-05-31 18:56 UTC

install

zapstore.dev or any Zapstore-compatible client

source & build

repository

https://github.com/helloworld1/freeotpplus

arch flags

android-arm64-v8a android-armeabi-v7a android-x86 android-x86_64

manifest

missing

releases (kind 30063)

1 release indexed; latest RELEASE-3.4.

assets & verification

Every app, release and asset event is schnorr-verified (NIP-01 id + signature) before it enters the catalog, and assets are content-addressed by sha256. We subscribe read-only to the catalog relay — never write to it.

Showing the newest 0 asset descriptors; the full set is in /api/apps/78ce6faa…