Aegis Authenticator - 2FA App Security & Privacy Scorecard

Aegis Authenticator - 2FA App

What This Means for You

Your authentication codes are encrypted on your device and protected by your password or biometric unlock, with all account information remaining fully under your control.

Recommendation: Very Secure

Ideal for anyone protecting their online accounts. Free, open-source, offline-first design with biometric unlock and encryption. Zero analytics, no invasive permissions, and fully auditable code.

Best For: Security-conscious users who want their authentication codes kept offline, with zero data collection and fully auditable source code.

Key Findings

Data Security - 1 finding (1 medium)

Network Security - 0 findings

Code Safety - 3 findings (2 low, 1 info)

Privacy - 0 findings

Privacy Concerns

What Data is Collected

• Authentication codes and account details: accessed on your device only, stored in your encrypted vault
• Camera: accessed on your device only, used for scanning QR codes when adding new accounts

Third-Party Data Sharing

No third-party data sharing was identified in this analysis.

Understanding the Scores

Security: 93/100
Privacy: 100/100

Security Breakdown

• Data Security: 91/100 - Your authentication codes are protected by strong encryption and your chosen password or biometrics, with the vault and all its contents secured on your device.
• Network Security: 100/100 - The app has no internet access permission, making it architecturally incapable of communicating with any server or transmitting any data remotely.
• Code Safety: 95/100 - The codebase reflects careful security design throughout, with strict permission scoping, screen capture prevention, and secure handling of sensitive information.

Privacy Breakdown

• Data Collection: 100/100 - No data of any kind is sent to external servers. Everything stays on your device.
• Data Sharing: 100/100 - No data is shared with any third party. The app has no network access and no mechanism to transmit information externally.
• User Control: 97/100 - You have full control over your data, including where backups are stored, whether cloud backup is enabled, and how your vault is unlocked. Your account information remains entirely yours.

Positive Security Features

• The app has no internet access permission, making it architecturally incapable of sending your data to any server or third party
• Screen capture is blocked across the entire app, preventing screenshots or screen recordings of your authentication codes
• Each encryption operation uses a fresh random component, making pattern analysis of the encrypted vault impractical
• Password-based vault protection uses memory-intensive key derivation, making brute-force attacks extremely resource-intensive even with powerful hardware
• Zero analytics or tracking libraries of any kind are included in the app
• Biometric unlock keys are hardware-bound and excluded from all backups, ensuring they cannot be extracted from your device
• Cloud backup is opt-in and disabled by default, giving you explicit control over where your vault is stored
• Temporary files are cleared at every app launch, leaving no residual data between sessions
• The app is fully open-source, allowing independent security researchers to audit every line of code
• The internal activity log records only event types and anonymous identifiers, never storing account names or authentication codes
• The app only queries specifically needed companion apps rather than scanning all installed applications on your device

Areas for Improvement

GDPR / CCPA Compliance

The app's privacy practices could be strengthened by:

1. In-App Privacy Policy Access
   Adding a direct link to the privacy policy within the app settings would make it easier for users to review data practices without leaving the application.

Security Enhancements

1. Device Transfer Encryption Protection
   When using Android's device-to-device migration to move to a new phone, authentication codes stored in unencrypted vaults may transfer without protection. Setting a vault password before migrating ensures your codes remain protected throughout the transfer.

2. Emergency Wipe Feature
   The integration with GuardianProject-compatible panic apps, designed to wipe the vault in an emergency, does not currently function as intended due to a configuration issue. Users who rely on this emergency protection should be aware it is currently inactive.

3. Deferred Import Component Initialization
   A background component used for importing accounts from other apps is initialized at every launch, even when that feature is not in use. Deferring this to when the import feature is actually requested would better align with minimal resource usage principles.

4. Account Link Source Attribution
   When another installed app sends an account setup link to Aegis, the add-account form is pre-populated without displaying which app initiated the request. Showing the source app's identity would help users verify the origin before saving a new account.

Technical Context

App Type: Security utility for two-factor authentication management (sensitive data)
Classes Analyzed: 3056
Third-Party Services: 14 (all on-device libraries, no external data recipients)
Context Tags: sensitivedata, securityapp

---

About This Analysis

This security analysis was conducted by CITT (Can I Trust That), an independent security analysis service. We perform static code analysis on Android applications to help users make informed decisions about app security and privacy.

App Details

Developer: Beem Development
Version: 3.4.2 (versionCode 81)
Analysis Date: 2026-06-26
Package: com.beemdevelopment.aegis

Analysis Limitations

• Static analysis only (code review without running the app)
• Based on APK version 3.4.2 analyzed on 2026-06-26
• May not reflect server-side security controls
• Cannot detect all runtime behaviors