Authenticator App - Stillcode

000000

30s

Your MFA and 2FA codes, on any of your devices.

Stillcode Pro saves them to your iCloud Keychain, which carries them to a new phone when it’s on.

Get Stillcode on the App Store

iPhone, iPad and Mac — one purchase covers all three.
Generating codes is free, with no account limit.

What it does

Stillcode generates the six-digit MFA and 2FA codes you need to sign in, following RFC 6238. Codes are computed on your device from a secret held in the iOS Keychain. Add accounts by scanning a QR code, from a photo of one, or by typing the key.

Two-factor authentication, service by service

Fifty services — what each one actually supports, a link to its own setup instructions, and the question none of those instructions answer: what happens to your codes when the phone they live on stops existing.

Browse all fifty →

What is free, and what is a purchase

Stated here because it is the thing most apps in this category leave you to discover after installing.

FREE

Unlimited accountsNo cap, and codes are never withheld.
Bulk importMove a whole authenticator over in one scan.
Add by QR, photo or keyScan a code, pick a photo of one, or type the key by hand.
Search, reorder, pinThe account you need twice a year stays one tap away.
Face ID, Touch ID or your passcodeLocks the app behind whatever the device already uses.
Move an account out by QREach account shows its own migration QR on screen, which any authenticator reads. One at a time, no file, no network.

iCloud Keychain syncSaves your codes as iCloud Keychain items, which iCloud carries to your other devices when that setting is on.
Encrypted exportA file you keep yourself.
Restore from an export fileIncluding on a fresh install.

Sold as a monthly subscription, a yearly subscription, or a single payment. The App Store shows the price for your country, in your currency, before you buy - and that is the only figure that applies to you, which is why no number is quoted here.

Without Stillcode Pro your codes stay on one device. If you lose that device, they are gone. Nobody can recover them for you, including us - see how your codes are held. The free way out is the per-account QR above: it moves accounts to another authenticator one at a time, while the phone still works. It is not a backup, and it will not help after the phone is gone.

What it does not do

No network calls

The app makes none. Not for analytics, not for crash reporting, not for remote configuration. That is enforced by a check that fails the build if a network call, an analytics dependency or a transport-security exception appears anywhere in the source.