Bloom Authenticator

A free two-factor authenticator with an end-to-end encrypted vault that syncs between web and Android.

Live on the web · Built in November 2026. Bloom Authenticator is a free two-factor authenticator for the web. Add an account by scanning a QR code or entering its setup key, just like Google Authenticator, and Bloom shows a fresh time-based (TOTP) code for each one. Your vault syncs between the web app and the Android app. Privacy by design Everything is end-to-end encrypted. Your master password never leaves your device: it derives a key with Argon2id, and every account is sealed with XChaCha20-Poly1305 before it is sent to the server, so the server only ever stores ciphertext. Features Google sign-in and passkeys (WebAuthn), encrypted backups, a recovery kit, device management, and an activity log. Architecture A Turborepo monorepo with a Go API (chi, pgx) running on Vercel serverless, a Next.js web app styled with Tailwind, an Expo / React Native mobile app, and PostgreSQL on Neon. Shared packages hold the crypto, vault logic, and a typed API client used by web and mobile. Bloom is a non-commercial showcase project and is free to use, with no ads and no paid plans. iOS is not available.

Gallery