Proton Authenticator vs Yubico Authenticator

Proton Authenticator generates time-based one-time codes for two-factor authentication, adding a code at login to help secure accounts. It can display codes without an internet connection, and a Proton Account is not required to use it. Signing in is optional and enables code syncing across devices. Users can import codes from Google Authenticator, 2FAS, Aegis Authenticator, Bitwarden Authenticator, Ente Auth, and LastPass Authenticator, then export their codes from the app. Backups can be stored locally or in the cloud, with end-to-end encrypted sync between devices. Proton says its servers cannot access synced data in unencrypted form; when sync is on, entries are protected with 256-bit AES-GCM. The app is open source, and its vault can be unlocked with face or fingerprint recognition. It is available for Android, iOS, Linux, macOS, and Windows; Android is also available through F-Droid. Proton Authenticator is free on all listed platforms, with no ads or tracking.

Yubico Authenticator generates two-step verification codes for online accounts on mobile and desktop devices. It supports TOTP and HOTP, and users can add credentials by scanning a service’s QR code. Credentials are stored in a YubiKey secure element; Yubico says they cannot be extracted. Since the credentials remain on the portable YubiKey, the same codes are available through the mobile and desktop apps. The mobile app supports tap-and-go authentication on NFC-enabled devices, and credentials can be added with a YubiKey touch or NFC tap. Yubico says users can unlock a YubiKey with Face ID or Touch ID. The app can display OATH codes and manage a YubiKey’s FIDO PIN or perform a factory reset. It is free and open-source software, listed at free, for Windows, macOS, Linux, iOS/iPadOS, and Android. Generating and displaying OATH credentials with the desktop app requires a YubiKey.