Chykalophia Docs

How authenticator apps work, which one to choose, and how to set one up on your phone for two-factor authentication.

An authenticator app is a small app on your phone that generates a fresh code — usually 6 digits, usually every 30 seconds. You enter this code when you log into an account as your second factor. No internet connection needed — the codes are generated entirely on your device.

Quick summary

An authenticator app generates time-sensitive login codes on your phone. It is more secure than receiving codes by text message. Choose Authy if you want easy backup and recovery, or 1Password if you already use that as your password manager. Setup takes about two minutes per account.

How authenticator apps work

The app and the service you're logging into share a secret key when you first set up 2FA. Both sides use this key plus the current time to calculate the same code — which changes on a short timer, typically every 30 seconds. No codes are transmitted over the internet; your phone generates them locally.

This is why authenticator codes are a stronger choice than codes sent by text message:

A code sent over the phone network can be intercepted if that channel is compromised, and the number itself can be taken over by a SIM swap or a number port
Authenticator codes exist only on your physical device
Each code is short-lived, so a code someone captures is quickly useless

NIST's digital identity guidelines call sending codes over the phone network their one "restricted" method — still allowed, but a less secure approach, and organizations using it are told to warn people and offer an alternative. An authenticator app is not on that list.

Choosing an authenticator app

App	Best for	Backup/recovery	Cost
Authy	Most people — best recovery options	Encrypted cloud backup once you switch it on, syncs across your devices	Free
Google Authenticator	Simplicity; comes with Google integration	Syncs to your Google Account when you sign in	Free
Microsoft Authenticator	Microsoft 365 users	Cloud backup — but you can only restore onto the same kind of device you backed up from	Free
1Password	1Password subscribers	In your vault	Subscription
Apple Passwords	Apple-only users (iOS 18, macOS Sequoia and later)	iCloud	Free

Our recommendation: Authy for most people. Once you enable its backup feature, it backs up your accounts to its cloud, encrypted with a password you set, and Authy says it never receives that password — so if you lose your phone, you can restore your accounts on a new device. Switch the backup on when you install the app; it is not on by default, and it is what removes a significant point of failure.

Setting up Authy

Download Authy from the App Store (iOS) or Google Play (Android).

Enter your phone number and verify it. Authy uses your number when you add a new device, by text, voice call, or approval from a device you already have.

Turn on Backups and set a backup password. This encrypts your cloud backup. Store the password in your password manager or somewhere very safe — Authy never receives it, so it cannot recover your accounts if you forget it.

Add your first account. In the account you want to protect, go to security settings and find the 2FA option. When you see the QR code, switch to Authy and choose to add an account.

Scan the QR code by pointing your phone's camera at the screen.

Name the account in Authy (e.g., "My Business Gmail").

Enter the 6-digit code shown in Authy back into the website to confirm it's working.

Using your authenticator code when logging in

Once 2FA is set up, here is what happens every time you log in on a new device:

Enter your username and password as normal.

The site asks for your 2FA code.

Open your authenticator app. Find the account in the list.

Type the code shown. You usually have about 30 seconds before it changes — but if it changes while you're typing, just use the new one.

Never share your code

Legitimate companies will never call or message you asking for your 2FA code. If someone asks for your code, it is a scam. Hang up or stop replying.

What to do when you get a new phone

Plan for this before it happens:

If you use Authy:

Install Authy on your new phone.
Log in with your phone number.
Approve access from your old device (if you still have it), or use account recovery.
Enter your backup password to unlock the backup. Authy never receives that password, so without it nobody — including Authy — can restore your accounts.

If you use Google Authenticator:

If you signed in to your Google Account in the app, just install Google Authenticator on the new phone and sign in to the same account. Your codes sync across.
If you use the app without a Google Account, transfer the codes by hand: on the old phone, tap Menu → Transfer accounts → Export accounts, then on the new phone tap Menu → Transfer accounts → Import accounts and scan the QR code.

If you already lost your old phone without doing this: Use the backup codes you saved when setting up 2FA for each account, or go through each service's account recovery process.

What to do if you lose your phone

Use backup codes to regain access to critical accounts.
If you don't have backup codes, use each service's account recovery process (this takes time — sometimes days).
Once you have access, change your passwords and set up 2FA again on your new device.

This is why saving backup codes is so important. Do it when you set up each account.

Common questions

Can I use the same authenticator app for all my accounts?

Yes. One app can hold codes for dozens of accounts. You'll see a list of all your accounts in the app, each with its own rotating code.

Is it safe to have all my 2FA codes in one app?

Yes — most of these apps can be locked behind your phone's biometrics or a PIN, and the codes are stored on your device (or encrypted in the cloud for apps like Authy). Turn that lock on. The risk of having them in one app is far smaller than the risk of not using 2FA at all.

My code keeps saying it's wrong — what's happening?

Authenticator codes depend on your phone's clock being accurate. If your phone's time is slightly off, the codes won't match. Go to your phone's settings and ensure the date and time are set to update automatically.

Can I use an authenticator app on my laptop instead of my phone?

There are desktop authenticator apps (including 1Password), but it is more secure to have the authenticator on a separate device from the one you're logging in from. If your laptop is compromised, an attacker should not also have access to your codes.

Need a hand?

If you're stuck, email support@chykalophia.com and we'll help. Include your website address and a screenshot if you can.

Using an authenticator app