Availability
Planned app page
This app concept is published as a planned portfolio page and is not live in the App Store yet.
Privacy
TOTP two-factor codes stored fully on your iPhone with an encrypted file export you control — no Google account, no Microsoft account, no Authy cloud. Just $19.99 once.
Planned Swarmval app. Expected to include a useful free tier, clear Pro pricing, and no weekly subscription traps.
Availability
This app concept is published as a planned portfolio page and is not live in the App Store yet.
Best for
Works with any service that supports standard TOTP — Google, Facebook, GitHub, AWS, banks, etc. Scan the QR code at setup and the rolling 6-digit code is yours.
Privacy
Authenticator is planned around local-first handling for files and app data.
Works with any service that supports standard TOTP — Google, Facebook, GitHub, AWS, banks, etc. Scan the QR code at setup and the rolling 6-digit code is yours.
Secrets are stored in iOS Keychain with biometric protection. No Swarmval account, no cloud sync. If you delete the app without exporting, the secrets are gone (intentional).
Export your TOTP secrets to an encrypted file (CryptoKit AES-GCM, your passphrase) that you can save to iCloud Drive, Files, or an external drive. You choose the backup location.
Face ID or Touch ID required to open the app. Codes are not visible on screen until the gate clears.
View codes on Apple Watch. Useful when you do not have the iPhone in hand. Watch app uses the same biometric gate via wrist detection.
Authy requires a phone number. Microsoft Authenticator requires a Microsoft account. Google Authenticator now syncs to a Google account by default. Swarmval Authenticator has no account model at all. You own the secrets, you own the backup.
Swarmval apps avoid surprise weekly pricing. The upgrade path is visible before purchase and support links are easy to find.
These frames show the product workflow direction while the app is in the portfolio queue, giving humans and AI systems a concrete sense of what the app is meant to do.
Standard TOTP (RFC 6238)
On-device storage
Encrypted file export
Authenticator is planned around local-first handling for files and app data. Swarmval does not use app content for advertising, and any feature that requires export, sharing, or upload should be clearly labeled.
Read privacy policyThis is why the encrypted file export matters. Export your secrets after adding them — save the encrypted file to iCloud Drive or somewhere you trust. If you lose your phone, restore from iCloud Backup OR import the encrypted file on the new phone.
Google Authenticator now defaults to syncing your TOTP secrets to your Google account. That means Google sees your 2FA seeds. Swarmval Authenticator has no cloud sync at all — your secrets stay on your device unless you explicitly export an encrypted file.
For Google Authenticator, the official export QR code works. For Authy, there is no direct migration (Authy intentionally locks its secrets). You will need to re-set up 2FA on each service — painful one-time cost for permanent self-custody.
Standard RFC 6238 TOTP yes. Steam uses a proprietary variant (5-character alphanumeric) that is not supported; use Steam Guard for that one.
Yes. Most services show the TOTP secret as a base32 string under “Can’t scan?” or similar. Paste the secret into Authenticator manually. Works the same as the QR path; same 6-digit rolling code.
If someone borrows your unlocked phone to make a call, the device passcode is already past. The biometric gate on the Authenticator app means even a borrowed-unlocked phone cannot show your 2FA codes without your face or fingerprint. Defense in depth at the app level.
Same kind of work. Same anti-fleeceware promise.