Can generate both time-based (TOTP) and counter-based (HOTP) codes Sophos Authenticator does not only operate with a Sophos account, but also with accounts from Google, Dropbox, Facebook, Github and all the other providers who implement authentication in this standardized way. The app will generate these codes for you in a convenient way, directly on your smartphone or tablet, without the need for Internet connection. Once configured, 2-step authentication protects your account by requiring both your password and an additional code, thus adding an extra layer of security. It generates both time-based and event-based one-time passwords (OTP) according to RFC 6238 and RFC 4226. Sophos Authenticator is a simple and intuitive application that provides multi-factor authentication on your mobile device.