Internet Multimedia System Connectivity Science & Education Navigation Keyboard & IME Reading
Clockwork: 2FA Authenticator

Clockwork: 2FA Authenticator

Kevin  |  Password & 2FA

3 Downloads 12 Views v2.0 3.18 MB 4.1+
Download APK

 (3.18 MB)

Editor's Overview

Clockwork: 2FA Authenticator is a password & 2fa application developed by Kevin, packaged as a single Android APK of version 2.0 weighing in at 3.18 MB. The package targets Android 4.1+ and above. Below you'll find the publisher's own description, a quick spec sheet, and a short buyer-beware checklist so you know exactly what you're installing before tapping download.

Install Checklist

  1. Only download through the button on this page — never from third-party mirrors or shortened links, which are the most common way malware spreads.
  2. File size is a light 3.18 MB, so it installs quickly even on modest connections.
  3. This build is signed by "Kevin" — always verify the developer name matches what's listed on the app's official store page before installing an update.
  4. After install, Android may prompt you to allow "Install from unknown sources" — approve only this one install, then revoke the permission in Settings > Apps > Special access.
  5. We link directly to the APK file or the publisher's repository; we do not modify the binary. Always run a virus scan after any sideloaded install.

About this app

Clockwork is a two-factor authenticator (2FA) that generates TOTP codes entirely on your device. It declares no INTERNET permission at all — the app cannot open a connection, and you can check that in the manifest before you believe a word of this.

That is the difference. Most authenticator apps hold network access for sync, service icons or update checks. Clockwork does not have the permission, so the question never comes up.

WHAT IT DOES
• Generates TOTP codes (RFC 6238) — SHA-1, SHA-256 or SHA-512, 6 to 8 digits, any period.
• Add accounts the way you happen to have them: scan a QR code, import a QR image, paste an otpauth:// link, or type a Base32 secret. A full Google Authenticator export is converted automatically.
• A dial with 30 marks and a moving hand shows the time left — a position you read at a glance, not a shrinking bar.
• One tap copies the code, and the next one is on screen before it becomes valid.
• Broken input is explained line by line, never silently swallowed.

YOUR SECRETS STAY YOURS
• By default nothing is stored at all. Close the app and the secrets are gone.
• Switch the vault on and they stay here, encrypted with your passphrase: AES-256-GCM, key derived by PBKDF2-SHA-256 with 600,000 iterations. Only the sealed envelope is written to disk — never the plaintext, never the passphrase, never the derived key.
• Unlock with your fingerprint if you want to. The passphrase stays the only way back in.
• Locks automatically after a time you choose and when you leave the app. Screenshots and preview images can be blocked.
• Android backup is switched off, so the encrypted vault never leaves the device.

PRIVACY
Nothing is collected, because there is nowhere for it to go. No analytics, no telemetry, no update pings, no advertising identifiers, no accounts, no ads. The camera permission serves the QR scanner alone and is declared optional hardware — importing a QR image works without it.

BUILT TO BE CHECKED
Open source under the MIT licence. The OTP algorithms are written from scratch against the RFC test vectors — no OTP library. Source code, test suite and the measurement scripts behind every claim above are public at github.com/keco216/clockwork.

Speaks 37 languages, all bundled, including right-to-left layouts.

Android 8.0 or newer. On Android 7, 1.5.4 stays the final version.

One thing, independent of this app: set up backup codes with every provider before you rely on any authenticator. They are the only thing that gets you back in when a secret is gone.

Details

Versionv2.0
Size3.18 MB
DeveloperKevin
CategoryPassword & 2FA
Packageio.github.keco216.clockwork
Android4.1+
Last UpdatedOct 29, 2026
Downloads3

Frequently Asked Questions

Is Clockwork: 2FA Authenticator free to download?
Yes. The APK file linked from this page is free. The developer may offer in-app purchases once installed, but obtaining the installer itself costs nothing.

What Android version does Clockwork: 2FA Authenticator require?
Android 4.1+ or newer. Installing on older devices may cause crashes or refuse to install.

Is Clockwork: 2FA Authenticator safe to install?
We link to the exact APK published by Kevin. We do not modify the file. Still, as with any sideloaded app, scan it with a reputable antivirus before opening it, and only grant permissions the app genuinely needs.

How do I update Clockwork: 2FA Authenticator?
Install the newer version on top of the old one — Android will keep your data. If the signature differs, uninstall first (you may lose local progress).

Why is the app not installing?
Common causes: not enough storage, an older Android version than 4.1+, or a conflicting build already installed. Free up space, check your OS version, and uninstall any previous copy before retrying.

How to Download & Install Clockwork: 2FA Authenticator

  1. Tap the Download APK button above and save the file to your device.
  2. Open your device Settings → Security (or Apps → Special access → Install unknown apps) and allow your file manager or browser to install unknown apps for this one file only.
  3. Open the downloaded io.github.keco216.clockwork.apk file from your Downloads folder.
  4. Tap Install and wait for Android to finish.
  5. Open «Clockwork: 2FA Authenticator» by Kevin and grant only the permissions it actually needs.
  6. Revoke the "unknown sources" permission once you are done installing.

Note: this page hosts or links to the installer only. The application name, icon and description are provided for identification. All trademarks belong to their respective owners.