TokenGuard is a free, local-first two-factor authentication (2FA) app for iPhone and Apple Watch. TOTP codes are generated on-device, secrets stay in Apple Keychain behind Face ID, with encrypted backups and optional iCloud sync — a private alternative to Google Authenticator, Microsoft Authenticator, and Authy.