Private & Secured
Tirin Authenticator provides a premium, zero-knowledge security vault for your 2FA accounts. Protect and organize your TOTP/HOTP credentials across GitHub, Google, Slack, and corporate networks.
We believe your security vault should be yours alone. No analytical tracking, no marketing platforms, and zero remote server risks.
Credentials are cryptographically locked on-device using AES-GCM local storage encryption blocks.
Seamlessly backup and synchronize tokens across all your active Apple devices utilizing Apple Keychain sync keys.
View, copy, and log security verification tokens directly from your wrist with the Apple Watch widget app.
Add a biometric verification wall using Face ID, Touch ID, or high-security local device PIN codes.
Export encrypted credentials data or scan standard QR codes to migrate tokens safely between services.
Offline-first implementation structure ensures no external servers handle or store your account keys.
| Security Standards | AES-GCM-256 local database encryption with PBKDF2 salt parameters. |
| 2FA Compliance | Fully compliant with RFC 6238 (TOTP) and RFC 4226 (HOTP) schemas. |
| Backup Architecture | End-to-End Encrypted Apple iCloud Keychain synchronization protocols. |
| Supported Platforms | Compatible with iOS 15.0+ and watchOS 8.0+. Universal App container. |
| Data Privacy | Offline execution container. No telemetric analytical data transmitted. |
| Import / Export Formats | Encrypted password-protected JSON backup files, and standard key QR codes. |
No. Tirin Authenticator is an offline-first vault application. Your credentials remain stored locally on your device's secure keychain. We do not operate any web servers that aggregate or store keys.
When iCloud Sync is active, your backup packages are sent over Apple's secure iCloud Keychain sync channel. They are secured via zero-knowledge end-to-end encryption using keys that never leave your device.
Under the settings view, you can generate a password-protected JSON file. This backup is fully encrypted using the custom password you define, allowing you to migrate your data securely.
