AuthGeek: a desktop TOTP authenticator with an Argon2 vault and no cloud sync

AuthGeek is a desktop TOTP and HOTP authenticator that stores all data locally, without relying on a cloud service. It keeps secrets in a local vault, encrypted with Argon2id, and allows users to add accounts either by scanning a QR code or by providing the secret directly. The software supports encrypted backup and restore, ensuring users are not locked into a single machine.

Unlike other authenticators, AuthGeek does not require an account or synchronization, nor does it transmit any telemetry. The main motivation behind creating AuthGeek was to ensure that no aspect of the second factor depends on a third-party server. However, it is important to note that using the same machine for both authentication and storage presents a weaker security posture compared to a separate phone.

If the machine is compromised, both the authentication factor and the secrets are at risk. The developer chose Argon2id as the memory-hard function for key derivation over PBKDF2 because memory-hard functions are recommended for 2026. The current installer is not code signed, which may result in a warning from SmartScreen on the first run.

Despite this, the software is on the developer's list of planned improvements. For more information, visit the official site at https://techygeekshome.info/authgeek/, explore the source code on GitHub at https://github.com/techygeekshome/AuthGeek, or watch a demonstration video at https://youtu.be/HtrjpdrUe-g. If any issues with the cryptographic implementation are discovered, the developer encourages users to report them through an issue on GitHub instead of being hesitant to point out potential problems.