Sesame is a two-factor authentication app for iPhone, positioned as a 2FA experience that feels “built in” to the system. It is used to manage verification codes required when logging in to websites or apps, and supports organizing accounts by Profiles such as personal, work, side projects, and more. The main text clearly states that it is free and open source, with code available to read, build, and audit. It requires iOS 18 or later.
Its security design is “local-first”: verification codes are stored locally in the iOS Keychain on the device and hardware-encrypted by the Secure Enclave; metadata such as account names and issuers is kept in local storage, with no server-side involvement. The app can be locked with Face ID, Touch ID, or the device passcode, and can be configured to lock immediately after leaving the app or after a delay. For backups, Sesame supports iCloud Drive as well as exporting an encrypted file to an external drive or cloud-drive folder. Backups are encrypted with the user’s password before leaving the device, using AES-256-GCM and Argon2id for key derivation.
Sesame’s management features focus on the personal user experience: Profiles for grouping, instant search, Spotlight search, Siri retrieval of codes by account name with copying to the clipboard, and Shortcuts automation actions. After AutoFill is enabled, iOS can provide verification codes inline when logging in to a website or app, without opening Sesame. Note that the main text does not mention an enterprise admin console, centralized auditing, anomaly alerts, policy deployment, or team-sharing capabilities, so it should not be understood as an enterprise IAM or MFA management platform.
The pricing information is very clear: free and open source. The main text does not show any subscription, one-time purchase, enterprise edition, or paid commercial support, nor does it disclose compliance certifications such as SOC 2 or ISO 27001.
Its strengths are clear privacy boundaries, no server dependency, transparent encrypted backups, and deep use of native iOS capabilities, making day-to-day code retrieval efficient. The limitations are also obvious: it only supports iPhone and requires iOS 18+, with no evident cross-platform or enterprise governance capabilities. If using it for iCloud account 2FA, recovery codes must be saved separately; otherwise, losing access to Sesame may affect iCloud recovery. It is better suited to individual users and lightweight work scenarios that value local privacy and want an open-source 2FA tool.
Based on the main text alone, it is not possible to determine the direct-connection stability of trysesame.app or app downloads in mainland China, nor the available payment methods or app store availability. Therefore, its access status in China is unknown. Alternatives include Microsoft Authenticator, Google Authenticator, 2FAS, Aegis, or Bitwarden Authenticator, depending on the device platform and account ecosystem.
⚠ This review is compiled from public sources and does not constitute a purchase recommendation. Verify all facts on the vendor's official site. Verify on trysesame.app official site.
trysesame.app is an Unknown Cybersecurity provider. TG4G tracks its product information, an overall rating of 7.0/10, and a China-accessibility score of China direct-connect friendly. Click "Visit Official Site" to reach trysesame.app directly.