How to Migrate from Authy to an Open Source Authenticator App

For years, Authy was the undisputed king of two-factor authentication (2FA) apps, largely because it offered effortless cloud syncing across multiple devices. However, recent events have fundamentally changed the security landscape. Following significant data breaches and the highly controversial decision to shut down their desktop applications, millions of users are realising the danger of proprietary lock-in.

If you are still using Authy, your cryptographic seeds are trapped in an ecosystem you do not control. It is time to take back your privacy and learn how to migrate from Authy to a secure, open-source authenticator app.

Why Choose Open-Source Authenticators?

The core problem with Authy (and Google Authenticator, prior to recent updates) is that they intentionally make it incredibly difficult to export your tokens. They want to trap you in their ecosystem.

Open-source alternatives prioritise your digital freedom. They allow you to easily export your tokens as a heavily encrypted JSON file, meaning you can back them up to your own hard drive or move to another app whenever you want. The top two community-recommended options are:

• Aegis Authenticator: The absolute best option for Android users. It is entirely offline, incredibly secure, and fully open-source.
• Ente Auth: The best cross-platform option (iOS, Android, and Desktop). It offers secure, end-to-end encrypted cloud backups similar to Authy, but with a fully open-source codebase and guaranteed export capabilities.

Step 1: Understand the Lack of an “Export” Button

Because Authy is a proprietary closed system, there is no official “Export” button in their mobile app. While there are complex, unsupported developer scripts on GitHub that attempt to extract tokens from the legacy desktop app, these methods often break when Authy updates their API.

For 99% of users, the safest and most reliable method is the manual migration process. While tedious, it is a fantastic opportunity to audit your security and delete old, unused accounts.

Step 2: The Manual Migration Process

Before you begin, install your new open-source authenticator (like Aegis or Ente Auth) on your smartphone. Do not delete Authy yet.

1. Open Authy and look at your first saved account (e.g., your Google Account).
2. On your computer, log into your Google Account using the 2FA code generated by Authy.
3. Navigate to the security settings of that account.
4. Find the Two-Factor Authentication or 2-Step Verification section and temporarily turn it off. You may be required to enter an Authy code one last time to confirm this action.

At this exact moment, that specific account is unprotected. You must immediately proceed to Step 3.

Step 3: Re-enable 2FA With Your New App

1. Immediately click Turn On 2FA in the account settings.
2. The website will generate a brand new QR code on your computer screen.
3. Open your new open-source authenticator app (Aegis or Ente Auth) and tap the + or Add button.
4. Scan the QR code with your smartphone’s camera.
5. The app will generate a 6-digit code. Type that code into the website to confirm the pairing.
6. In Authy, swipe left on the old token and delete it, so you do not confuse the old code with the new one.

Repeat this process for every account in your Authy list: Log in, disable 2FA, re-enable 2FA, scan the new QR code, and delete the old Authy entry.

Step 4: Permanently Delete Your Authy Account

Once your Authy app is completely empty and all your accounts are safely secured in Aegis or Ente Auth, you should close your Authy account to ensure your phone number is removed from their servers.

1. Open the Authy app.
2. Navigate to Settings > Account.
3. Tap on Delete Account and follow the on-screen prompts.
4. Uninstall the Authy app from your smartphone.

By completing this migration, you have successfully reclaimed ownership of your cryptographic seeds, ensuring that no corporate decision or server breach can ever lock you out of your digital life.