Hanzo IAM authenticator app
TOTP authenticator app for iOS and Android, synced with Hanzo IAM.
Hanzo IAM Authenticator (app.hanzo.ai) is an open-source TOTP app (GitHub) similar to Google Authenticator or Microsoft Authenticator. It provides MFA with time-based one-time passwords (TOTP) on iOS and Android and can sync accounts with Hanzo IAM.
Features
- MFA — Generate TOTP codes for 2FA.
- Offline — Codes work without internet.
- Sync — Accounts sync across devices via Hanzo IAM.
- Privacy — Data encrypted and stored securely.
- UI — Simple, intuitive interface.
| Android | iOS |
|---|---|
![]() | ![]() |
What is TOTP?
TOTP (Time-based One-Time Password) is a standard 2FA method. Codes are generated from a shared secret and the current time (RFC 6238): they change every 30 seconds, work offline, and are widely supported.
Using the app
Step 0: Install
- Android: Releases or app.hanzo.ai.
- iOS: See app.hanzo.ai and the repo.
- Build from source: Hanzo IAM Authenticator – Building from source.
Step 1: Enable MFA account storage (optional)
To store TOTP accounts in Hanzo IAM, enable the MFA accounts setting on the Hanzo IAM server.

Step 2: Connect to Hanzo IAM
After installing the app (and enabling MFA accounts if you use sync), connect in one of these ways:
| Method | Steps |
|---|---|
| Manual | Tap Enter Server Manually, enter server URL, client ID, and organization name, then sign in. |
| QR code | Tap Scan QR Code, scan the QR from My Account → MFA accounts on the Hanzo IAM server. |
| Demo | Tap Try Demo Server to use the preconfigured demo instance. |

You can then view TOTP codes and manage 2FA accounts in the app.
Migration from other authenticators
From Google Authenticator
In Google Authenticator: Menu → Transfer accounts → select accounts → Export (QR code). In Hanzo IAM Authenticator, scan that QR to import.

From Microsoft Authenticator (Android, root required)
- On the device with Microsoft Authenticator, the app data is under
/data/data/com.azure.authenticator/databases/. Root access is required to read it. - Copy the
PhoneFactordatabase file. - In Hanzo IAM Authenticator: import → Import from Microsoft Authenticator → select the
PhoneFactorfile. - The app imports the TOTP accounts.

How is this guide?
Last updated on

