Skip to content
StateMaps

Is CA Mobile Authenticator Safe?

CA Mobile Authenticator privacy label · by CA, Inc · checked November 2026

  • Collects no data
App Privacy label Developer-reported · checked November 1, 2026
Data Not Collected

The developer states that no data is collected from this app.

Short answer

On the label, yes. CA Mobile Authenticator's developer reports that it collects no data, which puts it among the 40% of authenticator apps we checked with a "Data Not Collected" label. That is a self-declared statement, not an audit, and it does not cover data processed only on your device.

At a glance

CA Mobile Authenticator privacy in one look

Data exposure on the label
Data not collected
  1. 1
  2. 2
  3. 3
  4. 4

Built only from the developer's App Store label. It describes disclosure, not tested behaviour.

Verdict from the label
Data not collected

CA Mobile Authenticator's developer states that the app does not collect any data from this app.

Try it

Did CA Mobile Authenticator ask for something?

Pick the permission prompt you saw. We compare it with what CA Mobile Authenticator's developer declared.

It asked me for access to…
Tap a prompt to compare it with the label.
Not on the label

Location is not on CA Mobile Authenticator's label. That can be fine: data used only on your iPhone does not have to be declared. If the data would need to leave the phone for the feature to work, ask why it is missing.

Not on the label

User Content is not on CA Mobile Authenticator's label. That can be fine: data used only on your iPhone does not have to be declared. If the data would need to leave the phone for the feature to work, ask why it is missing.

Not on the label

Contacts is not on CA Mobile Authenticator's label. That can be fine: data used only on your iPhone does not have to be declared. If the data would need to leave the phone for the feature to work, ask why it is missing.

Not declared on the label

CA Mobile Authenticator declares no tracking, so a tracking prompt would contradict its label. Decline it, and consider reporting the mismatch to Apple.

Not on the label

Health & Fitness is not on CA Mobile Authenticator's label. That can be fine: data used only on your iPhone does not have to be declared. If the data would need to leave the phone for the feature to work, ask why it is missing.

A permission is what the app can reach on your iPhone; the label is what the developer says leaves it. They answer different questions.

Reading the label

What CA Mobile Authenticator's label means for you

“Data Not Collected” is the cleanest result a label can show. It means the developer states that no data leaves your iPhone in a way the developer or its partners can access for longer than needed to handle a request. Data processed only on your device does not count as collected, so CA Mobile Authenticator can still read files or photos you open in it.

The statement is the developer's own. Apple reviews apps but does not audit every label, and analytics or crash-reporting libraries added later can make a label out of date. If CA Mobile Authenticator asks you to create an account, upload files or allow tracking, that would not match a no-collection label — and is worth noticing.

Authenticator apps generate the second factor for your logins. The biggest practical risk is not data collection but losing your codes when you lose your phone. Turn on encrypted backup or export your accounts, and save the recovery codes each service gave you.

Among the 173 authenticator apps in our snapshot with a label, 36% declare tracking, 45% collect data linked to you and 40% say they collect nothing. CA Mobile Authenticator lists 0 data types, fewer than the average of 1.8 for this group.

Utilities range from calculators to VPNs, so their labels vary more than any other category. A simple tool that collects identifiers and usage data for tracking is a sign of advertising SDKs.

On your iPhone

Settings to check for CA Mobile Authenticator

  1. 1

    Lock the app

    On iOS 18 and later, touch and hold the icon and choose Require Face ID. Anyone who picks up your unlocked phone then needs your face, fingerprint or passcode to open it.

  2. 2

    Notifications

    Settings › Notifications › CA Mobile Authenticator › Show Previews: When Unlocked keeps message and account details off the Lock Screen.

Cross-app tracking

Does CA Mobile Authenticator track you?

No tracking declared

There is no “Data Used to Track You” section on CA Mobile Authenticator's label.

Does CA Mobile Authenticator track you? Full answer and how to stop it →

iOS 18 and later

Lock CA Mobile Authenticator behind Face ID

  1. Find CA Mobile Authenticator on your Home Screen or in App Library.
  2. Touch and hold the icon until the quick-actions menu opens.
  3. Tap Require Face ID (or Require Touch ID / Require Passcode, depending on your iPhone).
  4. Tap Require Face ID again to confirm. CA Mobile Authenticator now asks for authentication every time it opens.

The lock is an iPhone feature, so it works whether or not CA Mobile Authenticator has a passcode of its own. It does not change what the app sends to its developer.

Lock or hide CA Mobile Authenticator: step-by-step guide →

From the App Store record

About CA Mobile Authenticator

DeveloperCA, Inc
App Store categoryUtilities
Latest version2.15, released February 2025
First releasedDecember 2016
RequiresiOS 12.0 or later
Size7 MB
Age rating4+
Languages7 (EN, FR, DE, IT, JA, PT, ES)
Bundle IDcom.ca.sec.aa.authenticator-production

The current version shipped in February 2025, over a year before our snapshot. Older apps can lag behind iOS privacy features such as limited photo and contact access.

Read with care

What the label cannot tell you

  • A label is self-reported. Apple publishes the developer's answers and can reject apps that misrepresent them, but it does not independently verify what CA Mobile Authenticator sends.
  • It does not say where data is stored, how long it is kept, whether it is encrypted, or which companies receive it. The privacy policy covers those points.
  • Optional data counts: if a feature lets you add something (a profile photo, a phone number), the type is listed even if you never use the feature.
  • Data handled only on your iPhone is not 'collected', so a no-collection label is compatible with an app that reads your files locally.
  • Third-party sign-in, payment processors and SDKs are supposed to be included, but a label can lag behind a new version.

The question to ask CA Mobile Authenticator's developer: If this iPhone is lost, how do I restore my codes?

How it compares

CA Mobile Authenticator vs similar authenticator apps

Data types listed on each App Store privacy label
Tracks youLinked to youNot linkedCollects nothing

Fewer types is not automatically safer: a cloud backup app has to collect your files to work. Compare like with like.

Checking another app?

Look up any of our apps in seconds, or put two labels side by side.

App privacy checkerCompare two appsBrowse 4,500 apps
Keep exploring

Apps similar to CA Mobile Authenticator

Garena Authenticator
Not disclosed
Pixplicity Authenticator
Not disclosed
Authenticator 2FA - Auth Core
Collects nothing
BIL Suisse Authenticator
Collects nothing
Authenticator ℠
Tracks you5 types
Authenticator 2FA & OTP code
Tracks you3 types
Authenticator App Cloud Backup
Collects nothing
Authenticator App 2FA MFA by Denis Kondratovich
Collects nothing

All authenticator apps → Who tracks you? A–Z → Privacy label decoder →

Do it now

Your CA Mobile Authenticator privacy checklist

Tick what you have done
Tick each step as you do it on your iPhone.

Done. You have applied every control the label points to.

Quick quiz

True or false?

  1. Q1CA Mobile Authenticator's privacy label says it uses data to track you.
    Right.
    Not quite.

    False: there is no Data Used to Track You section on CA Mobile Authenticator's label.

  2. Q2Apple tests every app to confirm its privacy label is accurate.
    Right.
    Not quite.

    Labels are self-reported by developers. Apple can reject or remove apps that misrepresent practices, but it does not audit each label.

  3. Q3An app with a “Data Not Collected” label cannot read any of your photos.
    Right.
    Not quite.

    It can read photos you give it access to. Processing on your device is not collection; only data sent off the phone counts.

  4. Q4Data “Not Linked to You” is never sent off your iPhone.
    Right.
    Not quite.

    It is collected and sent; the developer says it is de-identified rather than tied to your account or device.

  5. Q5Tapping “Ask App Not to Track” can stop an app from working.
    Right.
    Not quite.

    Apple's rules require apps to work the same whether or not you allow tracking.

Questions people ask

CA Mobile Authenticator privacy FAQ

Is CA Mobile Authenticator safe to use?
Based on its App Store privacy label, cA Mobile Authenticator's developer states that the app does not collect any data from this app. Whether that is acceptable depends on what you will store in it. The label is developer-reported, not an independent security test.
Does CA Mobile Authenticator track you?
No. CA Mobile Authenticator's label has no Data Used to Track You section.
What data does CA Mobile Authenticator collect?
None, according to the developer's label.
Who makes CA Mobile Authenticator?
CA, Inc, according to the App Store. It was first released in December 2016 and the current version is 2.15.
Can I lock CA Mobile Authenticator with Face ID?
On iOS 18 or later, touch and hold CA Mobile Authenticator's icon and choose Require Face ID (or Touch ID / Passcode). This is an iPhone feature and works for most downloaded apps, whether or not the app has its own lock.
How does CA Mobile Authenticator compare with other authenticator apps?
Across 173 authenticator apps with labels in our snapshot, 36% declare tracking and 40% say they collect no data. CA Mobile Authenticator lists 0 data types against an average of 1.8.
If this iPhone is lost, how do I restore my codes?
The privacy label cannot answer that. Look for it in CA Mobile Authenticator's privacy policy or support pages, linked from the App Store listing. Turn on encrypted backup or export your accounts, and save the recovery codes each service gave you.
How do I delete my data from CA Mobile Authenticator?
Apps that let you create an account must also let you start account deletion from inside the app (an App Store rule since June 2022). Deleting the app from your iPhone alone does not delete data already sent to the developer.
Facts on this page come from CA Mobile Authenticator on the App Store, as reported by the developer. Checked 2026-11-01. How we collect data · Report a correction