Authy

Authy is a software-based two-factor authentication (2FA) authenticator that provides time-based one-time passwords (TOTP), push-based approvals, and cloud backup for tokens. It is available as mobile apps for iOS and Android, a desktop app for Windows and macOS, and browser extensions. The service also offers an API that developers can use to integrate 2FA into their applications.

Key features include multi-device synchronization, allowing access to tokens on multiple devices, and encrypted cloud backups that can be restored using a user-selected backup password. Authy focuses on combining traditional OTP codes with the convenience of push notifications for one-tap approval on supported devices.

Authy API and developers

The Authy API, now part of Twilio, enables developers to enroll users, generate and verify 2FA tokens, and manage authentication workflows within their applications. This makes it possible for online services and apps to offer a seamless 2FA experience to their users.

Security and privacy

Authy emphasizes security through encryption and device-based access. Data transmitted between clients and servers is protected with TLS, and tokens and backups are stored in encrypted form. Backups are secured with a user-provided backup password, and access to plaintext backup content is controlled by the user’s credentials.

History and ownership

Authy began as an independent 2FA project and was acquired by Twilio in 2015. Since the acquisition, Authy has operated as part of Twilio’s broader security and communications platform, extending Twilio’s offerings with a consumer-facing authenticator and a developer-facing API.

Usage and reception

Authy is used by individuals to manage personal 2FA and by organizations integrating 2FA into their products. It competes with other authenticator apps such as Google Authenticator and Microsoft Authenticator and is recognized for its cloud backup and multi-device support.