Authenticator – scans QR codes, generates time-based OTPs using HMAC, auto-refreshes on expiry, supports account deletion, and works fully offline