Black Vault Authenticator
Your sign-in codes. On your phone. Nowhere else.
An authenticator app for Android that makes the one-time codes you type when you sign in. It works with Google, Microsoft, GitHub, banks that offer authenticator codes and any other site that supports authenticator apps, and with Black Vault services. No accounts, no ads, no tracking, and no internet access.
Coming soon to Google Play. Requires Android 12 or newer.
- No accounts
- No ads or tracking
- No internet access
- Encrypted backup you control
Protected by Citadel
Citadel is the Black Vault security marker. For this app it stands for the approach described on our Security page: codes stay on your phone, stored encrypted, with no accounts and no internet permission.
In the app today
What it does today
Everything below is in the app now. Nothing here depends on an account or a connection.
Codes for the sites you use
Generates time-based and counter-based one-time codes for any site or service that supports authenticator apps, including Google, Microsoft, GitHub and banks that offer them.
Fingerprint, face or PIN lock
The app asks you to unlock it with your fingerprint, face or your phone’s screen lock when it opens, and again after it has been in the background.
Encrypted on your phone
Your codes are stored encrypted. The key is kept in your phone’s hardware-protected key storage on phones that support it.
Encrypted backup you control
Export a backup file protected by a passphrase only you know. Keep it wherever you like. We never receive it and cannot read it.
Works fully offline
The app has no internet permission, so it cannot send anything anywhere. Codes are made on the phone from its clock.
No ads. No tracking. No accounts.
There is nothing to sign up for and no analytics or advertising code in the app.
Bring your codes over
Import your accounts from Google Authenticator, or add new ones by scanning a QR code or typing the setup key.
Careful with the screen
The app asks Android to keep its screens out of screenshots, screen recordings and the recent-apps preview. Copied codes are cleared from the clipboard after 45 seconds.
Made simple
Who it is for
Anyone who wants authenticator codes on their phone without creating yet another account, and anyone who uses Black Vault services and wants one place for their codes. You do not need to be technical: scan the QR code a site shows you, and the app does the rest.
Read more about our security approach and privacy, or visit Support.
Illustrative screens from our brand kit. The released app may differ in detail.
On our roadmap
These are plans, not features. They are not in the app today, and we will say so here when they are released.
Push sign-in approvals for Black Vault services
With number matching: you approve a sign-in on your phone by typing the number shown on the sign-in screen. Planned; not in the app today.
Passkeys
Passkeys also protect you from fake sign-in pages. Planned; not in the app today.
iPhone
An iPhone version is planned. The app is Android only today.
Get the app
Coming soon to Google Play
The app is not on Google Play yet. We will link it here when it is. Questions in the meantime go to Support.