Usher Auth, the authenticator app
Your sign‑in codes, in one place.
The codes for two-step sign-in, for every service that offers an authenticator app. Your keys never leave your phone.
Your codes
The right code, at a glance.
Every account has its own card: who it’s for, its code in two easy halves, and the time it has left. Tap a card and the code is copied. In its last five seconds, the next one is already waiting.
Try it
Copy Acme Notes’ code from the phone and paste it here, the way you would when an app asks for it.
Acme Notes
Two-step sign-in
Enter the code from your authenticator app.
A working copy of the codes screen. The accounts are made up; the codes are real, made in your browser, and open nothing.
Adding an account
Add an account in a moment.
Turn on two-step sign-in where you sign in, and the service shows a QR code. Usher Auth reads it, and the codes start.
Point your camera at the QR code in the service’s security settings.
Turn on two-step sign-in
Scan this with your authenticator app, or enter the key below it.
KRUG KIDR OVUW G2ZA MJZG 653O EBTG 66BA
This is a demonstration: the QR code and key belong to a made-up account and work nowhere. Keep your real keys for the app.
Private by design
Your keys never leave your phone.
- 01
Kept on this phone only.
Each account’s key is sealed in your iPhone’s Keychain, readable only while your phone is unlocked, and only by Usher Auth. On Android, the keys are sealed with the phone’s own Keystore.
This phone only - 02
Usher Auth never goes online.
The app makes no network calls at all: no account, no analytics, no adverts, nothing sent anywhere. Codes are worked out on the phone from the key and the time, so they work in aeroplane mode too.
Aeroplane mode··· ···AccountsAnalyticsAdvertsOur servers - 03
Not to the cloud. Not to a new phone.
Your keys aren’t synced or backed up anywhere, so they don’t follow you to a new phone. Keep each service’s backup codes somewhere safe, and add your accounts again when you change phone.
Your phone×The cloud×A new phoneKeep each service’s backup codes somewhere safe.
- 04
Nothing collected.
Usher Auth collects nothing about you: no data, no tracking. The codes on this page are made the same way, in your browser.
Nothing collected- ✓No account
- ✓No analytics
- ✓No tracking
- ✓No adverts
- ✓No data leaves the phone
Locked, if you like
Only you see your codes.
Lock Usher Auth with Face ID, Touch ID or your passcode. In the app switcher, a cover hides every code. A copied code is kept for one minute, on this phone only.
Every screen
At home on every screen.
On a phone, your codes are a list. Open a foldable or turn to an iPad, and they become a grid of two, three or four columns: chosen by the width there is, never by the kind of device.
1 column, a list
In 55 languages
Usher Auth speaks your language: right to left too, where the layout mirrors but the ring still runs clockwise and the codes still read left to right.
Made for everyone
Everyone’s codes, their way.
VoiceOver
Codes are read digit by digit, with the seconds left: “4 8 2 9 1 3. Seconds left: 12.”
Larger text
Every screen grows with your text size, up to the largest.
Reduce Motion
The ring steps each second instead of sweeping, and the opening is a gentle fade.
Light or dark
System, Light or Dark, chosen from small previews of your codes.
The details
Works with every service that offers an authenticator app.
- Codes
- Time-based (RFC 6238): SHA-1, SHA-256 or SHA-512; 6 to 8 digits; any period from 10 to 300 seconds.
- Adding
- A QR code (camera or photo), a setup key, or an otpauth:// or usherauth:// link.
- Devices
- iPhone and iPad with iOS 18 or later. Android is coming.
- Languages
- 55, right to left included.
- Network
- None. The app never goes online.
- Price
- Free.
Apple, iPhone, iPad, Face ID, Touch ID and VoiceOver are trademarks of Apple Inc. App Store is a service mark of Apple Inc. Android is a trademark of Google LLC.