TOTPBOX vs Authy

Twilio Authy is a free authenticator for iPhone and Android with encrypted backups tied to your phone number. Twilio shut down the Authy desktop apps on March 19, 2024, and Authy has no export feature, so leaving it means re-enrolling each account. TOTPBOX runs in the desktop browser, fills codes into login forms, and lets you export your vault at any time.

Based on Authy's public documentation, checked . Vendors change their products, so confirm details in the sources below.

Feature comparison

CapabilityTOTPBOXAuthy
PlatformsChrome extension for Chromium-based browsers on Windows, macOS, Linux, and ChromeOS. Native apps are planned.iOS and Android. Desktop apps ended on March 19, 2024
Where secrets liveAES-256-GCM encrypted vault inside the browser on your computerOn the phone, plus Twilio's servers if backups are on
Backup and syncPassword-encrypted export on every plan. Pro adds end-to-end encrypted sync across up to 5 devices; the server only sees ciphertext.Encrypted backups protected by a backup password, restored with your phone number
ExportExport your whole vault to a file at any timeNo export feature
Browser autofillDetects one-time-code fields and fills the matching codeNone since the desktop apps were retired
Passkey guidanceFlags accounts whose service supports passkeys and walks you through the upgradeNot a documented feature
PriceFree. Pro is $4/monthFree

Choose TOTPBOX if

  • You lost Authy on the desktop and want codes on your computer again.
  • You want to be able to export your own secrets and leave whenever you choose.
  • You'd rather not link your authenticator to a phone number.

Stay with Authy if

  • You need codes on your phone today. TOTPBOX's native apps are not out yet.
  • You want backups restored with only your phone number and backup password.

Moving from Authy to TOTPBOX

Authy cannot export your secrets, so there is no file or QR code to import. You move each account by setting up its authenticator again. Do one account at a time and keep Authy installed until the last one is done.

  1. 1Sign in to the service and open its two-factor or security settings.
  2. 2Choose the option to change or reset the authenticator app. The service shows a new QR code.
  3. 3In TOTPBOX, choose Add account and scan that QR code from the page.
  4. 4Enter the code from TOTPBOX to confirm the change. The old Authy entry for that service stops working at this point.
  5. 5If the service gives you new recovery codes, save them in TOTPBOX's recovery code vault.
  6. 6Once every account works in TOTPBOX, remove the entries from Authy.