Freedom251 › Authenticator apps
OpenOTP Token
What OpenOTP Token is
OpenOTP Token is a free mobile authenticator for iOS and Android that adds second-factor authentication through an OpenOTP server. It supports TOTP and HOTP codes, enrolled by scanning QR codes or entering token details manually. Manual setup supports SHA1, SHA256, or SHA512 with six- or eight-digit codes, but not push tokens. Login requests can present approve-or-deny prompts, OTP displays, confirmation codes, or policy selection. Through the OpenOTP backend, the app also handles eSignatures, PSD2 transactions, and badging. Users set a PIN during setup and can add password or biometric protection; administrators can require protection for transaction approval. A location comparison can flag suspicious distance between the device and the request’s originating IP. Android devices without Google services can run the app, although push login requires Google services. Offline QR scanning supports Windows or macOS authentication integrations. Token exports can only be imported into OpenOTP Token on another device. The maker is headquartered in Esch-sur-Alzette, Luxembourg.
Who it suits
It suits iOS and Android users who need OpenOTP-based second-factor authentication, push approvals, OTP codes, signatures, or offline QR flows. Integrated push, eSignature, and badging features require an OpenOTP server.
What it does well
- Free iOS and Android authenticator
- Supports TOTP and HOTP
- Offers push approval workflows
- Provides password or biometric protection
- Supports offline authentication QR scanning
What to know first
- No multi-device sync
- Push login requires Google services on Android
- Manual enrollment cannot create push tokens
- Exports cannot go to third-party apps
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| OpenOTP Token | Free mobile authenticator for iOS and Android · requires OpenOTP server for integrated push, eSignature and badging features | Free |
As docs.rcdevs.com lists them, read 11 Oct 2026. The maker's own page has the final word.
Verdict
OpenOTP Token combines OTP codes, push decisions, transaction signing, and security controls in a free mobile app. Its strongest fit is an OpenOTP environment, with server requirements and limited token portability to consider.
Facts from OpenOTP Token's own pages
- Android compatibility
- Android devices without Google services can run the app, but push login currently requires Google services. · docs.rcdevs.com, 11 Oct 2026
- Anti-phishing
- Phishing protection compares the device location with the authentication request’s originating IP location and can alert users to suspicious distance differences. · docs.rcdevs.com, 11 Oct 2026
- Code type
- totp and hotp · rcdevs.com, 22 Sept 2026
- Electronic signatures
- The app can retrieve pending eSignature and PSD2 transactions from the OpenOTP backend, including transaction QR codes for offline signing flows. · docs.rcdevs.com, 11 Oct 2026
- Free plan
- Yes · rcdevs.com, 22 Sept 2026
- Headquarters
- Esch-sur-Alzette, Luxembourg · docs.rcdevs.com, 28 Sept 2026
- Integrations
- Token enrollment QR codes can be generated through WebADM, Self-Service Desk, Self-Registration and HelpDesk portals, as well as WebADM Manager APIs. · docs.rcdevs.com, 11 Oct 2026
- Maker and headquarters
- RCDevs Security lists its European headquarters at 1 Boulevard du Jazz, 4370 Esch-sur-Alzette, Luxembourg, and describes itself as founded in Europe; its About page does not state a founding year. · rcdevs.com, 11 Oct 2026
- Multi-device sync
- No · rcdevs.com, 22 Sept 2026
- Notable limit
- Token exports can be imported only into OpenOTP Token on another device, and exporting to third-party applications is unsupported. · docs.rcdevs.com, 11 Oct 2026
- Offline use
- The camera can scan offline authentication QR codes for Windows or macOS integrations when the server or laptop cannot reach the backend. · docs.rcdevs.com, 11 Oct 2026
- OTP formats
- Users can enroll tokens by QR code or manually, with manual enrollment supporting SHA1, SHA256 or SHA512 and six- or eight-digit OTPs; manual enrollment does not support push tokens. · docs.rcdevs.com, 11 Oct 2026
- Platforms
- The app is available for iOS and Android and can be installed from Google Play, the Apple App Store or alternative marketplaces. · docs.rcdevs.com, 11 Oct 2026
- Purpose
- OpenOTP Token is a free mobile authenticator that provides second-factor authentication, including push notifications, eSignatures and badging integrated with the OpenOTP server. · docs.rcdevs.com, 11 Oct 2026
- Push approvals
- Yes · rcdevs.com, 22 Sept 2026
- Push authentication
- The app supports simple approve-or-deny push, displayed OTP codes, confirmation codes and policy selection for login requests. · docs.rcdevs.com, 11 Oct 2026
- Secure enrollment
- For detached push-token QR enrollment, the complete secret key is negotiated with the backend after scanning, the enrollment session is PIN-protected, and a successfully used QR code becomes unusable. · docs.rcdevs.com, 11 Oct 2026
- Security
- The app requires a PIN at setup and supports password or biometric protection, which administrators can enforce for transaction approval through OpenOTP settings. · docs.rcdevs.com, 11 Oct 2026
- Support
- The app exposes its version and build number and provides a logs view that users can refresh or copy for troubleshooting. · docs.rcdevs.com, 11 Oct 2026
- Supported platforms
- iOS,Android · rcdevs.com, 22 Sept 2026
- Third-party tokens
- The app can scan QR codes from providers such as Google and Microsoft, but their push features work only in their respective provider apps and systems. · docs.rcdevs.com, 11 Oct 2026
Where OpenOTP Token stands on Freedom251
- Authenticator apps#46 of 111