Your codes. Your accounts. Your security.
ORVEXIA Authenticator generates TOTP codes on your device, inside an encrypted vault locked by PIN or biometrics — no cloud, no tracking, no way for us to read your secrets.
Built to do the job
Local-first two-factor authentication with an encrypted vault, biometric lock, QR import and an organization console for teams.
On-device TOTP
RFC 6238 codes generated locally. Nothing is sent anywhere.
Encrypted vault
AES-256-GCM with PBKDF2 key derivation. Secrets are never stored in plain text.
PIN & biometric lock
Auto-lock on idle, unlock with Face ID, fingerprint or PIN.
Scan or import
Add accounts by QR, or migrate an existing Google Authenticator export.
Works offline
No network required. Codes keep rolling with the plane in airplane mode.
Organization console
Roles, policies and audit for teams that need to prove compliance.
See Authenticator in action
On every device
Simple, scalable pricing
These are the plans we intend to launch with. Nothing is on sale yet — join the waitlist and we will tell you when it is.
- Free forever, no card
- On-device TOTP
- Encrypted vault
- Community support
- Everything in Free
- PIN & biometric lock
- Scan or import
- Email support
- Everything in Pro
- Works offline
- Organization console
- Priority support
Where Authenticator is headed
We build in the open. Here's what is built, what is in progress and what is next. The product is in development and not yet generally available.
Core
- On-device TOTP
- Encrypted vault
Mobile
- iOS & Android builds
- Biometric unlock
Teams
- Organization console
- Roles & audit
Continuity
- Encrypted backup
- Multi-device sync