{
  "id": 5867996,
  "title": "AuthGeek: a desktop TOTP authenticator with an Argon2 vault and no cloud sync",
  "url": "https://urgent.news/2026/09/06/authgeek-a-desktop-totp-authenticator-with-an-argon2-vault-and-no",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-06T00:05:43.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/techygeeks1/authgeek-a-desktop-totp-authenticator-with-an-argon2-vault-and-no-cloud-sync-2dbp"
  },
  "original_language": "en",
  "account": "AuthGeek is a desktop TOTP and HOTP authenticator that stores all data locally, without relying on a cloud service. It keeps secrets in a local vault, encrypted with Argon2id, and allows users to add accounts either by scanning a QR code or by providing the secret directly. The software supports encrypted backup and restore, ensuring users are not locked into a single machine. Unlike other authenticators, AuthGeek does not require an account or synchronization, nor does it transmit any telemetry. The main motivation behind creating AuthGeek was to ensure that no aspect of the second factor depends on a third-party server. However, it is important to note that using the same machine for both authentication and storage presents a weaker security posture compared to a separate phone. If the machine is compromised, both the authentication factor and the secrets are at risk. The developer chose Argon2id as the memory-hard function for key derivation over PBKDF2 because memory-hard functions are recommended for 2026. The current installer is not code signed, which may result in a warning from SmartScreen on the first run. Despite this, the software is on the developer's list of planned improvements. For more information, visit the official site at https://techygeekshome.info/authgeek/, explore the source code on GitHub at https://github.com/techygeekshome/AuthGeek, or watch a demonstration video at https://youtu.be/HtrjpdrUe-g. If any issues with the cryptographic implementation are discovered, the developer encourages users to report them through an issue on GitHub instead of being hesitant to point out potential problems.",
  "summary": "Hi DEV! I was fed up picking up my phone to type a six digit code into the machine I was already sitting at. The desktop authenticators I tried either wanted an account, synced my secrets to their cloud, or both, which rather defeats the point of the thing being under my control. AuthGeek is a TOTP and HOTP authenticator that keeps everything local: Secrets in a local vault, encrypted with…",
  "key_points": [
    "AuthGeek authenticator stores data locally without cloud sync",
    "Uses Argon2id for secure key derivation over PBKDF2",
    "Supports encrypted backup and restore for multi-machine use"
  ],
  "editors_take": "AuthGeek's local storage and encryption approach gives users full control over their authentication data, but also requires them to trust the security of the machine running the software.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}