Authy → Ente Auth

Authy is the two-factor authenticator run by Twilio. Its desktop apps for Windows, macOS and Linux were retired in 2024, and the app has no built-in export. That combination is the main reason some users look at Ente Auth, an open-source authenticator with cross-platform apps and encrypted sync.

Why people leave Authy

Three documented facts come up most often. First, the desktop apps reached end of life on March 19, 2024, according to coverage of Twilio’s notice. After that point the desktop app warned users and then logged them out, and Twilio recommended its mobile apps or a different desktop authenticator instead. Second, Twilio’s security alert dated July 1, 2024 said attackers used an unauthenticated endpoint to confirm which phone numbers were linked to Authy accounts. Twilio said the endpoint was secured, that Authy accounts were not compromised, and that affected users should update to Android 25.1.0 or iOS 26.1.0 and watch for phishing texts. Third, Ente’s own migration guide states that Authy cannot export 2FA codes through the app.

What Ente Auth is and what it costs

Ente Auth is a two-factor authenticator from Ente. Its site lists apps for iOS, Android (including F-Droid), Web, macOS, Linux and Windows, and says codes sync across devices with end-to-end encryption. An offline mode lets it be used without an account. The code is published under the AGPL-3.0 licence on GitHub, and the project says Auth is free and will remain free. The site also says its cryptography has been externally audited, which is the project’s own statement. No price is listed for Auth.

What the switch changes, and what it does not

The practical gain is a desktop and web option that is still maintained, plus code that can be read and an export feature the project advertises. The trade-offs are real. There is no automatic migration, so every account has to be moved or re-enrolled by hand. Ente is a smaller company than Twilio, so long-term support rests on a smaller organisation, even though the AGPL licence means the code stays available. Authy’s multi-device and backup behaviour differs from Ente’s account-based encrypted sync, so anyone relying on Authy backups should check how recovery works in Ente before moving.

How migration works

Because Authy has no export, Ente’s guide describes several unofficial routes. These include a terminal export tool that may not work on current Authy versions, a Bitwarden-format conversion, a method that needs a rooted Android phone, and an iOS method that decrypts tokens with a third-party guide. None is an official Authy feature and none is guaranteed to export every code. The slower but dependable route is to re-enrol each service: open its security settings, turn two-factor authentication off and on again, and scan the new QR code in Ente Auth. Ente also accepts manual secret entry and bulk import from other apps.

Migration checklist

• List every account currently in Authy before changing anything.
• Install Ente Auth and create an account, or choose to use it without backups.
• Check how account recovery works in Ente before relying on it.
• For each service, re-enrol 2FA with a new QR code, or try an import route from Ente’s guide.
• Test a login for each service before removing it from Authy.
• Delete any exported files, since they contain unencrypted secrets.
• Keep Authy installed until every account has been confirmed.

Other open-source authenticators such as 2FAS and Aegis also exist for people who prefer a different design; they are not reviewed here.