TOTPBOX vs Aegis Authenticator
Aegis is a free, open-source authenticator for Android. Like TOTPBOX, it keeps an AES-256-GCM encrypted vault on your own device and never needs a cloud account. The difference is where it runs: Aegis lives on an Android phone, while TOTPBOX lives in the desktop browser and fills codes into login forms. Many people use both with the same secrets.
Based on Aegis Authenticator's public documentation, checked . Vendors change their products, so confirm details in the sources below.
Feature comparison
| Capability | TOTPBOX | Aegis Authenticator |
|---|---|---|
| Platforms | Chrome extension for Chromium-based browsers on Windows, macOS, Linux, and ChromeOS. Native apps are planned. | Android only |
| Where secrets live | AES-256-GCM encrypted vault inside the browser on your computer | AES-256-GCM encrypted vault on the phone |
| Backup and sync | Password-encrypted export on every plan. Pro adds end-to-end encrypted sync across up to 5 devices; the server only sees ciphertext. | Automatic encrypted backups to a folder you choose; no sync service |
| Browser autofill | Detects one-time-code fields and fills the matching code | None; codes are copied or typed from the phone |
| Import from other apps | Google Authenticator transfer QR codes, standard otpauth QR codes, TOTPBOX exports | Many apps, including Authy, 2FAS, Google Authenticator, and Microsoft Authenticator |
| Source code | Closed source. The architecture and encryption model are documented in the security whitepaper | Open source (GPL-3.0) |
| Price | Free. Pro is $4/month | Free |
Choose TOTPBOX if
- You sign in on a computer and want codes filled in the browser.
- You want recovery codes and passkey upgrade tracking alongside your TOTP accounts.
Stay with Aegis Authenticator if
- You only need codes on an Android phone.
- You want open-source code you can audit or build yourself.
- You want broad import from other authenticator apps today.
Moving from Aegis Authenticator to TOTPBOX
TOTPBOX can't read Aegis export files yet. Because both apps use standard TOTP, you can copy accounts over one by one and keep using Aegis on your phone at the same time.
- 1In Aegis, open an entry's edit screen to see its issuer, account name, and secret.
- 2In TOTPBOX, choose Add account, switch to manual entry, and enter the same issuer, name, and secret. Keep the default settings unless Aegis shows a different digit count, period, or algorithm.
- 3Check that both apps show the same code.
- 4Repeat for the accounts you use on your computer.