From Raivo OTP to 2FAS

My recommended TOTP app changes ownership under questionable circumstances — so I replace that recommendation.


In 2021, I wrote several posts about how to practice good management of your various passwords. One of those posts dealt specifically with the handling of time-based one-time passwords (TOTPs) and, in it, I recommended the Raivo OTP app for iOS users.

Until yesterday, I was perfectly happy both using Raivo OTP and recommending it. But then, I found out things had changed, and not in a good way.

While viewing yesterday’s Episode 144 of the Surveillance Report podcast, I saw that Raivo had changed ownership under some less-than-satisfying circumstances. Here is the relevant segment:

. . . followed by the cited issues in the Raivo OTP repository:

Unpleasantly surprised by this information, I realized I should do two things ASAP.

First, I had to withdraw that recommendation for Raivo OTP; and I’m doing that now, by both writing this post and issuing an edit to the earlier post.

Second, I had to come up with an alternative recommendation, since the other iOS-compatible OTP apps I’d mentioned in the first post still don’t stack up to what Raivo OTP has offered.

The good thing is that, in the nearly two years since the first post, I’ve encountered another TOTP app for iOS and iPadOS (as well as Android) that merits my recommendation: 2FAS.1 It’s free, open-source, provides cloud-based sync for your TOTP data, and even has an import/export feature that lets you easily transition to it from several other TOTP apps — including Raivo OTP.

Edited screen capture of 2FAS application

2FAS, iOS version (TOTPs simulated and some self-identifying text hidden).

As of now, 2FAS has no macOS version, but it does have a browser extension; and, of course, Apple’s Universal Clipboard feature lets you copy a TOTP straight to a nearby Mac from 2FAS on your iDevice.

While the circumstances surrounding the Raivo OTP ownership change are less than desirable, at least there are other TOTP apps, like 2FAS, on which an iDevice user still can rely.

  1. Although the 2FAS app was around when I originally issued that post, I somehow missed finding it in my research and, thus, failed to include 2FAS in my summary of satisfactory TOTP apps. ↩︎

Reply via email
View comments