Authy
Authy, a Twilio subsidiary since 2015, provides a free consumer two-factor authentication app (iOS, Android, desktop) and an enterprise 2FA API/SDK for developers, generating revenue indirectly through Twilio's authentication platform usage.
- Company typePrivate
- Founded2011
- HeadquartersSan Francisco, United States
- Headcount251–500
- GTM typeB2B and B2C
- OfferingSoftware
What Authy does
Authy is a two-factor authentication (2FA) product, founded in 2011 and wholly acquired by Twilio in 2015, that operates both as a consumer authenticator app and as an enterprise developer API. The consumer product - a free software-based 2FA app available on iOS, Android, desktop (Windows/Linux/Mac), and Apple Watch - generates time-based one-time passcodes (TOTP) and supports encrypted on-device cloud backup, multi-device synchronization across Twilio's infrastructure, offline token generation, TouchID/PIN protection, and push-notification authentication flows. The enterprise product - the Twilio Authy API and SDK - lets developers embed TOTP and push-based 2FA into their own applications, effectively turning any app into a self-branded authenticator, and is positioned alongside Twilio's broader Verify identity and authentication offering. The consumer app is freemium and free to download, with no in-app monetization; revenue accrues through Twilio's authentication API usage rather than the consumer app itself, executing a product-led growth motion at the consumer layer and an API-first, developer-ecosystem motion at the enterprise layer. Customer segments are horizontal: individual consumers protecting personal accounts (social, email, banking, crypto) and developers/businesses integrating 2FA, with no named end-customer logos disclosed in the input data. A 2024 security incident - CVE-2024-39891, which exposed phone numbers tied to ~33 million Authy accounts via an unauthenticated API endpoint - resulted in patched Android/iOS releases and a CISA Known Exploited Vulnerabilities listing requiring federal agency remediation by August 13. Authy is a privately held subsidiary of Twilio Inc. (NYSE: TWLO), headquartered in San Francisco, USA, with 251-500 employees attributed to the subsidiary and no standalone revenue or independent funding events disclosed since the 2015 acquisition beyond its pre-acquisition $3.067M raised across three 2012-2014 rounds.
Authy firmographics
Firmographics- Name
- Authy
- Legal name
- Authy (operated by Twilio Inc.)
- Website
- https://authy.com
- Company type
- Private
- Founded year
- 2011
- Operating status
- Operating
- Headcount range
- 251–500 employees
- Short description
- Authy, a Twilio subsidiary since 2015, provides a free consumer two-factor authentication app (iOS, Android, desktop) and an enterprise 2FA API/SDK for developers, generating revenue indirectly through Twilio's authentication platform usage.
- Ownership category
- akta.pro rank
Authy industry classification
Industry- Product category
- Two-Factor Authentication Software
- akta.pro primary industry
- Authentication (MFA/Passwordless/Biometrics) Platforms (BPAMAEAE)
Keywords
Where Authy is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Markets served
Authy business model
Business model- GTM type
- B2B and B2C
- Offering type
- Software
- Cost components
- Technology or R&D, Infrastructure, Personnel, Marketing or Sales, Operations
Revenue model
- Consumer App (Free): Authy consumer app is offered as a free download for individual users to secure their online accounts. Revenue is not directly generated from the consumer app but serves as a product-led growth tool that drives awareness and leads to Twilio's enterprise authentication services.
- Twilio Authy API/SDK (Enterprise): Twilio offers Authy APIs and SDKs for developers and businesses to integrate two-factor authentication into their applications. This enterprise offering provides developer-friendly authentication APIs that can turn any app into a self-branded authenticator, monetized through Twilio's platform.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Others | Free consumer app |
Go-to-market motion2 records
Distribution channels4 records
Marketing channels5 records
Authy product offering
Product offeringCore offering
Authy provides a free, cross-platform two-factor authentication app that generates time-based one-time passwords (TOTP) to secure online accounts against account takeover. It also offers the Twilio Authy API and SDK, which allow developers and businesses to embed customizable, self-branded 2FA capabilities directly into their own applications. Together, the consumer app and enterprise API form the front-end and back-end of Twilio's authentication portfolio.
Product overview
Authy is a single unified two-factor authentication (2FA) application owned by Twilio since 2015. The product portfolio consists of the Authy App (available for iOS, Android, and desktop platforms) as the core consumer-facing product, and the Authy API/SDK for developers who want to integrate 2FA capabilities into their own applications. The Authy App generates time-based one-time passwords (TOTP) and supports features including encrypted cloud backup, multi-device synchronization, TouchID/PIN protection, and offline token access. The Authy API enables developers to add 2FA functionality via Twilio's developer-friendly APIs and SDK.
Differentiator
Problem solved
Functional benefit
Products and services
- Authy App A free, cross-platform two-factor authentication app available on iOS, Android, and desktop that generates time-based one-time passwords (TOTP) to secure users' online accounts. It targets individual consumers who want to add a second factor of authentication to accounts such as email, social media, banking, and cryptocurrency exchanges, offering encrypted cloud backup, multi-device synchronization, TouchID/PIN protection, offline token generation, and push-notification approvals.
- Authy API / SDK A developer-facing authentication API and SDK that enables businesses and software teams to embed two-factor authentication into their own applications and turn any app into a self-branded authenticator. It targets developers and product/security teams seeking scalable, integration-ready 2FA and supports push-notification authentication, TOTP delivery, and programmatic token management through Twilio's cloud platform.
Quantifiable outcome
- Prevents account takeovers by requiring both password and second-factor authentication, blocking access even if password is stolen or phone is lost
- +1 more outcomes
Companies that use Authy
Customer profileSegments2 records
Ideal customer profiles2 records
Authy technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Feature6 records
Authy partnerships and signals
Strategic signalScale indicators4 records
Recent moves5 records
Expansion highlights4 records
Authy competitors and assessment
Company assessmentEmerging players
- 1Password: 1Password has embedded a TOTP authenticator into its password manager, positioning it as an emerging competitor that combines credential storage with 2FA, directly competing for Authy's consumer base.
- Yubico: Yubico (YubiKey) is an emerging player in phishing-resistant hardware authentication that competes in the broader MFA category, especially for high-security enterprise use cases where software authenticators like Authy are weaker.
- Bitwarden: Bitwarden offers a built-in TOTP authenticator within its password manager, competing with Authy for users seeking an integrated credential and 2FA experience.
Broad incumbents
- Okta: Okta is a broader identity and access management incumbent that includes authenticator capabilities (Okta Verify) and competes with Authy's enterprise API for SSO, adaptive MFA, and customer identity workflows.
- Auth0: Auth0 (now part of Okta) is a broad identity platform incumbent that overlaps with Twilio Authy API in providing developer-facing authentication infrastructure for consumer and B2B apps.
Others
- Twilio Verify: Twilio Verify is Twilio's SMS- and voice-based OTP API that competes in adjacent authentication workflows to Authy; while same parent, it represents the alternative authentication channel Authy is positioned against.
Direct peers
- Microsoft Authenticator: Microsoft's TOTP and push-approval authenticator directly competes with Authy in both consumer and enterprise (Entra ID) contexts, with similar push-based passwordless flows and broader Microsoft 365 integration.
- LastPass Authenticator: LastPass offers a TOTP authenticator app that directly competes with Authy, with similar cloud backup and push approval features, often bundled with the LastPass password manager.
- Duo Security: Duo (owned by Cisco) is a direct enterprise MFA competitor to Twilio Authy API, offering push-based authentication, TOTP, and adaptive access controls for workforce and customer use cases.
- Google Authenticator: Google's free TOTP-based authenticator app is the most direct competitor to Authy's consumer app, offering offline code generation but lacking cloud backup and multi-device sync — making Authy's feature set a key differentiator.
Market position
Strengths4 records
Weaknesses5 records
Competitive moat4 records
Key risks5 records
Key highlights6 records
Customer concentration
Authy social profiles
Digital presenceAuthy financial estimates
Financial estimateRevenue estimate
Valuation estimate
Authy leadership team
Management profileNumber of profiles
Authy funding detail
Funding detailFunding overview
Funding rounds3 records
Investors15 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Authy M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Authy
What does Authy do?
Authy provides a free, cross-platform two-factor authentication app that generates time-based one-time passwords (TOTP) to secure online accounts against account takeover. It also offers the Twilio Authy API and SDK, which allow developers and businesses to embed customizable, self-branded 2FA capabilities directly into their own applications. Together, the consumer app and enterprise API form the front-end and back-end of Twilio's authentication portfolio.
Is Authy a public or private company?
Authy is a private company. It is classified as corporate owned and is currently operating.
When was Authy founded?
Authy was founded in 2011. It employs 251 to 500 people.
Where is Authy based?
Authy is headquartered in San Francisco, United States, in the North America region.
How does Authy make money?
Two revenue lines are on record. Consumer App (Free) is the primary driver. The others are twilio Authy API/SDK (Enterprise).
Who are Authy's main competitors?
Emerging players on record are 1Password, Yubico and Bitwarden. Broad incumbents are Okta and Auth0. Twilio Verify is listed as an others. Direct peers are Microsoft Authenticator, LastPass Authenticator, Duo Security and Google Authenticator.
Does Authy have an API?
Yes. Twilio offers authentication APIs that developers can use to add 2FA to applications. The Authy API is a developer-friendly authentication API that can turn any app into a self-branded authenticator. Additionally, an SDK is available for developers to integrate 2FA functionality. Developer documentation is at www.twilio.com/authy/api.
What industry is Authy in?
Authy's product category is Two-Factor Authentication Software. Its primary akta.pro industry code is BPAMAEAE, Authentication (MFA/Passwordless/Biometrics) Platforms.