Aegis · Ente Auth
What it's for
Apps that generate the six-digit codes changing every 30 seconds, replacing Google Authenticator.
Why it matters
Aegis (Android) keeps your codes in a local encrypted vault, no cloud. Ente Auth adds end-to-end encrypted sync across devices, and has been audited. Far safer than SMS, and free.
For whom & when
Everyone: it’s the default 2FA level to adopt, ahead of hardware keys.
Install & use
- Install Aegis (F-Droid) or Ente Auth (all platforms).
- On each account, enable “authenticator app” 2FA and scan the QR code shown.
Write down the backup codes on paper and make an encrypted backup of your vault.