Freedom251 › Authenticator apps
pi-authenticator
What pi-authenticator is
pi-authenticator is a free mobile OTP authenticator for the privacyIDEA Authentication Server. It supports HOTP and TOTP with 30- or 60-second intervals and SHA-1, SHA-256, or SHA-512 hashing. QR enrollment uses the Google Authenticator Key URI format. Tokens from an earlier app version can be imported through Settings under Migration, then renamed, deleted, or locked behind device credentials. The app also supports privacyIDEA PUSH authentication, including configurations that do not use Firebase. Pending push challenges can be checked by swiping down, while automatic polling can be enabled when the app is open. The project describes support for user-configured Firebase projects and lists a more secure enrollment method as a goal. pi-authenticator runs on Android and iOS and is licensed under Apache License 2.0. The listed plan costs nothing. The project is based in Kassel, Germany, and Google Play lists [email protected] for support.
Who it suits
pi-authenticator suits privacyIDEA users who need HOTP, TOTP, or PUSH authentication on Android or iOS. It also fits users needing token migration, QR enrollment, or device-credential locking.
What it does well
- Supports HOTP and TOTP
- Offers multiple hashing algorithms
- Provides privacyIDEA PUSH authentication
- Supports QR-code enrollment
- Allows token locking and migration
What to know first
- Designed for the privacyIDEA server
- More secure enrollment is listed as a goal
- Push polling requires the app to be open
- No desktop platform is listed
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| privacyIDEA Authenticator | Mobile authenticator app | Free |
As github.com lists them, read 12 Oct 2026. The maker's own page has the final word.
Verdict
pi-authenticator combines OTP and privacyIDEA PUSH authentication with token management on Android and iOS. Its free Apache-licensed distribution and migration controls make it practical for privacyIDEA deployments, while its purpose remains tied to that server.
Facts from pi-authenticator's own pages
- Code type
- totp and hotp · github.com, 21 Sept 2026
- Current release
- The changelog lists version 4.8.0 dated 2026-08-12 and includes an Android target SDK 36 update among its changes. · github.com, 12 Oct 2026
- Enrollment security
- The project lists providing a more secure enrollment method as a goal and describes support for user-configured Firebase projects. · github.com, 12 Oct 2026
- Free plan
- Yes · github.com, 21 Sept 2026
- Headquarters
- Kassel, Germany · github.com, 28 Sept 2026
- License
- The project states that the app is licensed under Apache License 2.0. · github.com, 12 Oct 2026
- Maker
- The app store listing names NetKnights GmbH as the developer and gives its address as Ludwig-Erhard-Str. 12, 34131 Kassel, Germany. · play.google.com, 12 Oct 2026
- OTP support
- The app supports HOTP and TOTP with 30- or 60-second intervals and SHA-1, SHA-256, or SHA-512 hashing. · github.com, 12 Oct 2026
- Platforms
- The README says the app runs on Android and iOS. · github.com, 12 Oct 2026
- Purpose
- pi-authenticator is an OTP authenticator app for the privacyIDEA Authentication Server. · github.com, 12 Oct 2026
- Push approvals
- Yes · github.com, 21 Sept 2026
- Push authentication
- The app supports privacyIDEA PUSH authentication and can be configured to use PUSH without Firebase. · github.com, 12 Oct 2026
- Push polling
- Pending privacyIDEA push challenges can be polled by swiping down, with automatic polling available in settings while the app is open. · github.com, 12 Oct 2026
- QR enrollment
- The app can scan QR codes in the Google Authenticator Key URI format. · github.com, 12 Oct 2026
- Support
- Google Play lists [email protected] as the app support email. · play.google.com, 12 Oct 2026
- Supported platforms
- Android,iOS · github.com, 21 Sept 2026
- Token controls
- The guide says tokens can be deleted or renamed, and locked to require device credentials for access. · github.com, 12 Oct 2026
- Token import
- The app guide says tokens from the previous app version can be loaded through Settings under Migration. · github.com, 12 Oct 2026
Where pi-authenticator stands on Freedom251
- Authenticator apps#59 of 111