Hacker ApprovedDepartments

Authy

Ranked 5 of 5 authenticator apps by recommenders

Free two-factor authenticator people say works across devices and survives phone upgrades, though critics say Twilio neglected it and dropped its desktop app.

Free two-factor authenticator people say works across devices and survives phone upgrades, though critics say Twilio neglected it and dropped its desktop app.

21 people gave an opinion

recommend it
6
criticize it
15
approval share
29%
Each figure is one person. RecommendsCriticizes

Recommended in 4 of 13 months

  1. November 2025: not recommended
  2. December 2025: not recommended
  3. January 2026: not recommended
  4. February 2026: not recommended
  5. March 2026: recommended
  6. April 2026: not recommended
  7. May 2026: not recommended
  8. June 2026: recommended
  9. July 2026: recommended
  10. August 2026: not recommended
  11. September 2026: recommended
  12. October 2026: not recommended
  13. November 2026: not recommended (month in progress)

Why it doesn’t carry the badge

  • 6 people recommend itNeeds 10 or more, not met.
  • 0.4 recommenders for every criticNeeds 2 to 1 or better, not met.
  • Recommended in 4 of 13 monthsNeeds 4 or more, met.

The same three rules apply to every product, and the badge can’t be bought. How the badge works

What people say about it

The reasons people give, with the number of comments that give each one. Open a reason to read what they said.

Why people recommend it

Each mark is one comment

  • Works after upgrading iPhone

    “the only app that would just work after upgrading my iphone”

    Comment from 27 Mar 2026 in “GitHub now requiring 2FA for all contributors,what authenticator apps you using?”
  • Runs on multiple devices

    “I use authy authenticator which I have on multiple devices.”

    Comment from 17 Sep 2026 in “Ask HN: How to recover Google auth after phone stolen?”
  • Usable as backup on spare phone

    “Authy and a throwaway phone added in that sits in a safe place.”

    Comment from 17 Sep 2026 in “Ask HN: How to recover Google auth after phone stolen?”

What people warn about

Each mark is one comment

  • Desktop client removed or broken

    “I recommend you get off Authy - they don't have a browser extension or a desktop client”

    Comment from 5 Oct 2026 in “Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped”

    “stopped supporting their desktop client (thus eliminating my alternate device backups)”

    Comment from 18 Sep 2026 in “Ask HN: How to recover Google auth after phone stolen?”

    “they enshittified their app and bricked the desktop version”

    Comment from 17 Sep 2026 in “Ask HN: How to recover Google auth after phone stolen?”
  • Acquisition by Twilio seen as neglect

    “Authy is also EOL since it was acquired by twilio and tossed into the do not recycle bin it seems”

    Comment from 28 Jun 2026 in “Michigan bill would bar employers from requiring after-hours coms with workers”

    “Twilio screwed over everyone using that app”

    Comment from 10 Apr 2026 in “FBI used iPhone notification data to retrieve deleted Signal messages”
  • Hard to leave, no exports

    “they don't allow exports to keep you stuck in their app”

    Comment from 14 Sep 2026 in “OEMpocalypse: Unprivileged Android app to root on Samsung, Xiaomi, others”

    “I should figure out how to ditch Authy”

    Comment from 21 May 2026 in “Get your passwords out of Bitwarden while you still can”

    “I keep meaning to ditch Authy”

    Comment from 16 May 2026 in “Bitwarden scrubs 'Always free' and 'Inclusion' values from its site”
  • Custom TOTP scheme raises security doubts

    “unlike say Authy where we had to inject Javascript to extract the TOTP seeds”

    Comment from 15 May 2026 in “Bitwarden scrubs 'Always free' and 'Inclusion' values from its site”

    “they have their own weird TOTP scheme”

    Comment from 28 Jun 2026 in “Michigan bill would bar employers from requiring after-hours coms with workers”

Other authenticator apps people recommend

The four most recommended other authenticator apps, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.

Authy compared with 4 alternatives
ProductRecommendCriticizeApprovalMonthsOwnedBadge
Aegis Authenticator28197%10—Approved
Ente Auth22485%7—Approved
Microsoft Authenticator135120%7——
Google Authenticator9950%7——
AuthyThis page61529%4——
See all 5 authenticator apps, ranked

What people said

18 of the 24 comments that mention it, newest first. Each links to the original comment.

“I recommend you get off Authy - they don't have a browser extension or a desktop client”

CriticizesComment from 5 Oct 2026 in “Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped”

“stopped supporting their desktop client (thus eliminating my alternate device backups)”

CriticizesComment from 18 Sep 2026 in “Ask HN: How to recover Google auth after phone stolen?”

“I use authy authenticator which I have on multiple devices.”

RecommendsComment from 17 Sep 2026 in “Ask HN: How to recover Google auth after phone stolen?”

“Authy and a throwaway phone added in that sits in a safe place.”

RecommendsComment from 17 Sep 2026 in “Ask HN: How to recover Google auth after phone stolen?”

“they enshittified their app and bricked the desktop version”

CriticizesComment from 17 Sep 2026 in “Ask HN: How to recover Google auth after phone stolen?”

“That seems extremely wrong to me.”

CriticizesComment from 14 Sep 2026 in “OEMpocalypse: Unprivileged Android app to root on Samsung, Xiaomi, others”

“I missed the train to move away from Authy in 2024”

CriticizesComment from 14 Sep 2026 in “OEMpocalypse: Unprivileged Android app to root on Samsung, Xiaomi, others”

“they don't allow exports to keep you stuck in their app”

CriticizesComment from 14 Sep 2026 in “OEMpocalypse: Unprivileged Android app to root on Samsung, Xiaomi, others”

“ever since authy killed their desktop app.”

CriticizesComment from 18 Jul 2026 in “Ente – Opening Our Books”

“Authy is also EOL since it was acquired by twilio and tossed into the do not recycle bin it seems”

CriticizesComment from 28 Jun 2026 in “Michigan bill would bar employers from requiring after-hours coms with workers”

“they have their own weird TOTP scheme”

CriticizesComment from 28 Jun 2026 in “Michigan bill would bar employers from requiring after-hours coms with workers”

“I should figure out how to ditch Authy”

CriticizesComment from 21 May 2026 in “Get your passwords out of Bitwarden while you still can”

“I keep meaning to ditch Authy”

CriticizesComment from 16 May 2026 in “Bitwarden scrubs 'Always free' and 'Inclusion' values from its site”

“unlike say Authy where we had to inject Javascript to extract the TOTP seeds”

CriticizesComment from 15 May 2026 in “Bitwarden scrubs 'Always free' and 'Inclusion' values from its site”

“Twilio screwed over everyone using that app”

CriticizesComment from 10 Apr 2026 in “FBI used iPhone notification data to retrieve deleted Signal messages”

“almost locked me out of my 2fa”

CriticizesComment from 4 Apr 2026 in “I Built an SMS Gateway with a $20 Android Phone – Jonno.nz”

“the only app that would just work after upgrading my iphone”

RecommendsComment from 27 Mar 2026 in “GitHub now requiring 2FA for all contributors,what authenticator apps you using?”

“it would be a tacit admission that their SMS and Authy products are not actually that secure”

CriticizesComment from 9 Jan 2026 in “Why is SendGrid emailing me about supporting ICE?”

Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.