---
url: 'https://www.corbado.com/glossary/authenticator-app'
title: 'Authenticator App'
description: 'Learn what an Authenticator App is, how it enhances security with two-factor authentication, and its benefits over other security methods.'
lang: 'en'
keywords: 'authenticator app'
---

# Authenticator App

## What is an Authenticator App?

An **Authenticator App** is a software application designed to enhance account security by
generating time-sensitive passcodes used alongside traditional passwords. It's commonly
used for [two-factor authentication](https://www.corbado.com/blog/passkeys-vs-2fa-security)
([2FA](https://www.corbado.com/blog/passkeys-vs-2fa-security)), adding an extra layer of security by requiring
two forms of verification to access an account, e.g. something you know (your password)
and something you have (a code generated by the app).

> - **Authenticator App:** A software that generates a temporary, secure passcode for
>   multi-factor authentication.
> - Enhances security by offering another authentication factor.
> - Generates time-sensitive passcodes, typically every 30 seconds.

---

### How Authenticator Apps Work

[Authenticator](https://www.corbado.com/glossary/authenticator) apps operate by creating one-time passcodes
(OTPs) based on a secret key and the current time. These passcodes refresh frequently
(e.g. every 30 seconds), providing a dynamic security measure that is hard to intercept or
replicate. Here’s a deeper exploration:

- **Setup:** The user scans a [QR code](https://www.corbado.com/blog/qr-code-login-authentication) provided by
  the online service, linking the app with the account.
- **Operation:** Each time a user logs in, the app generates a new one-time passcode that
  must be entered in conjunction with the user's regular login credentials.
- **Security:** The passcode is only valid for a short window, enhancing security and
  reducing the risk of unauthorized access.

### Benefits of Using an Authenticator App

- **Enhanced Security:** By requiring a passcode in addition to a password,
  [authenticator](https://www.corbado.com/glossary/authenticator) apps make it much harder for attackers to gain
  unauthorized access.
- **Convenience:** Passcodes can be generated with smartphones, allowing for flexibility
  in authentication.
- **Versatility:** Many services support [authenticator](https://www.corbado.com/glossary/authenticator) apps,
  making them a universal tool for securing various online accounts.
- **Cheap:** Unlike other MFA methods, such as SMS OTP, authenticator apps and the TOTPs
  they produce do not rely on services like operators where you have to pay transactional
  fees e.g. for SMS.

---

## Authenticator App FAQs

### How secure are authenticator apps?

- Authenticator apps are considered highly secure as they generate passcodes that expire
  quickly and are only valid for single use, reducing the risk of theft or reuse.

### What happens if I lose my device with the authenticator app?

- Losing your device can be mitigated by backup options such as recovery codes or the
  ability to transfer the authentication service to a new device, usually by
  re-authenticating the services.

### Are there alternatives to using an authenticator app for 2FA?

- Alternatives include SMS-based verification, email verification, passkeys or hardware
  tokens like [YubiKeys](https://www.corbado.com/glossary/yubikey), each with its own security considerations.

### How do I transfer my authenticator app to a new phone?

- Most authenticator apps allow you to transfer your credentials to a new device by
  re-scanning the QR codes from your online accounts into the app on your new phone.