x2y Authenticator

The app provides a fully offline two‑factor authentication vault that stores TOTP secrets locally on an Android device. It generates one‑time codes without contacting any external server, and access to the vault is protected by hardware‑level biometrics such as fingerprint or face unlock within the device’s trusted execution environment. The application also employs OS‑level screenshot prevention to block visual capture of codes.

A distinctive feature is a dual‑PIN system that creates a decoy vault alongside the real one. When the decoy PIN is entered, the app displays a functional but fabricated set of codes, allowing users to comply with coercion while keeping their genuine secrets hidden. Encrypted panic backups can be created for emergency recovery, and the app does not require accounts, emails, or any cloud synchronization, keeping user data outside any external jurisdiction.

The software targets users who need high‑security, privacy‑focused authentication without reliance on cloud services, such as security‑conscious individuals or professionals handling sensitive accounts. Its design emphasizes offline operation, zero‑knowledge handling of secrets, and protection against both digital and physical threats.