Biometric Lock
Face ID, Touch ID, or Optic ID required to open the app. Your codes are protected the moment you look away.
Pangi is a privacy-first TOTP authenticator built entirely for the Apple ecosystem. Face ID locked. AES-256 encrypted. No trackers, ever.
For iPhone (iOS 17+) and Apple Watch (watchOS 11+)
Built native for Apple. Every feature exists to keep your codes accessible and your secrets safe.
Face ID, Touch ID, or Optic ID required to open the app. Your codes are protected the moment you look away.
Secrets are stored in the Apple Keychain with hardware-backed protection — not in a plain database file.
Export password-protected backup files using AES-256-GCM encryption. Your password, your data — we can't read it.
Sync across your Apple devices with confidence. Account data is encrypted on your device before it ever reaches iCloud.
View your TOTP codes and countdown right from your wrist. Accounts sync securely from iPhone via WatchConnectivity.
Glanceable home screen widgets for your top accounts. iOS AutoFill puts one-time codes right in the keyboard bar.
Pangi is designed so that your secrets stay secret — even from us.
Pangi is a two-factor authenticator (TOTP) app for iPhone and Apple Watch. It generates time-based one-time passcodes for your online accounts and stores your authenticator secrets securely on-device in the Apple Keychain — not in the cloud, not in a plain database.
Your secrets are stored in the Apple Keychain with hardware-backed protection, guarded by Face ID, Touch ID, or Optic ID. Backup files use AES-256-GCM encryption with PBKDF2 key derivation (100,000 iterations). iCloud sync encrypts everything on your device before any data leaves it.
No. Pangi contains no advertising SDKs and no third-party analytics. The app does not send your data to any external server other than your own private iCloud database when you choose to enable sync. Your authenticator secrets never leave your device unencrypted.
Yes. Pangi offers optional encrypted iCloud sync. Account data is encrypted on your device before being uploaded to your private CloudKit database — iCloud stores only encrypted payloads that Pangi decrypts locally. You can disable sync at any time and the cloud copy is removed.
Yes. Pangi includes an Apple Watch companion app (watchOS 11+) that displays your TOTP codes and countdown timers right from your wrist. Accounts sync securely from your iPhone using Apple's WatchConnectivity framework.
Yes. Pangi supports Google Authenticator's export QR code format. You can scan the migration QR code with the camera or import from a screenshot in your photo library. Pangi also supports standard otpauth:// QR codes and encrypted Pangi backup files.
If you have iCloud sync enabled, your encrypted accounts are recoverable on a new device signed into the same Apple ID. You can also create encrypted backup files to store separately as an additional safeguard.
If you lose both your device and your backup password, encrypted backups cannot be recovered — Pangi cannot access your data, by design.
Yes. Pangi offers a small widget (one account) and a medium widget (up to three accounts). Widget codes are automatically hidden when the device is locked to protect your privacy, and refresh automatically at each TOTP period boundary.
When you copy a TOTP code, Pangi automatically clears it from the clipboard after 30 seconds. The clipboard is also set to local-only mode so the code doesn't sync to your other Apple devices via Universal Clipboard. If you copy something else first, Pangi won't touch your new clipboard content.
Yes. Pangi includes an iOS Password AutoFill extension. When signing into a website or app, Pangi can appear in the QuickType bar above the keyboard to provide your one-time code directly — no need to switch apps and copy manually.
Pangi is built and personally supported by Jacob Suchorabski. For questions, bug reports, or feature requests, reach out directly — no ticket queue, no bots.
jacob@suchorab.skiPangi is coming to the App Store soon. Secure, private, and built for Apple.