Two-factor authentication, done gently
Your 2FA codes, in bloom on every device.
Bloom Authenticator keeps your 2FA codes in an end-to-end encrypted vault that syncs across web and Android. Only you can unlock it.
Everything your codes need
End-to-end encrypted
Codes are encrypted on your device. We store ciphertext we cannot read.
Sync everywhere
Web and Android stay in sync. Lose a phone, keep your codes.
Easy import
Bring codes from Google Authenticator, 2FAS or Aegis in Settings → Import.
Folders & search
Find the right code in a second, even with hundreds of accounts.
Encrypted backups
Backups locked with a separate password, restorable on any device.
No lock-in
Export Google-compatible QR codes or download all your data any time.
How end-to-end encryption works here
Think of your vault as a locked box. Your devices hold the key; our servers only ever carry the closed box.
- 1
You pick a master password
It never leaves your device. Not even we can see or reset it.
- 2
Your device makes the key
Your password unlocks a private key that locks every account before it leaves your device.
- 3
Only ciphertext is synced
Our servers store and sync encrypted blobs. Other devices decrypt them after you unlock.
Questions
+Can you see my 2FA codes?
No. Your accounts are encrypted on your device with a key only your master password can unlock. We store ciphertext we cannot decrypt.
+What if I forget my master password?
We cannot reset it or recover your vault. Keep your recovery kit somewhere safe, make encrypted backups, and keep the backup codes each website gives you when you turn on 2FA.
+Do codes work offline?
Yes. Codes are generated on your device from the current time. Once your vault is unlocked, no connection is needed. Sync needs a connection.
+How do I move from Google Authenticator?
In Google Authenticator choose "Transfer accounts → Export", then open Settings → Import in Bloom and scan the QR (or upload a screenshot on web). Unencrypted 2FAS and Aegis exports work too.
Let your codes bloom.
Free while in beta. Set up in a minute; import from Google Authenticator in two.
Create your vault