Two-factor authentication codes that live in your browser, encrypted at rest. Nothing on a server.
What is this?Hide details▾
What is TOTP?
Standards-compliant TOTP (RFC 6238) running entirely in your browser. Secrets are encrypted at rest with AES-GCM-256; a master key is wrapped by both a passphrase (PBKDF2-SHA256 × 600k) and optionally a WebAuthn PRF-derived key for Touch ID / Windows Hello unlock. Mandatory encrypted JSON backup before the first secret saves — losing your only authenticator means lockout otherwise. Works offline. No accounts, no sync server.
TOTP
Not saved — your browser is blocking storage for this site, so this vault will be lost when you leave. Download a backup after each change.Not saved — storage is full, so recent changes to this vault aren't kept on this device. Download a backup now.
Copy code
Locked
Pick a passphrase to set up your vault. You will use it every time you unlock.
A forgotten passphrase can't be recovered, not even by us. After you add your first account you'll download an encrypted backup; keep it and the passphrase somewhere safe.
or
auto-lock
No accounts yet. Click "Add account" to start.
Add TOTP account
This browser can't save data for this site right now, so this account won't be kept here. After you add it, download a backup — it will be the only copy.
Export QR codes from other authenticator apps work too, so you can bring several accounts across at once.
— or fill in manually —
Import accounts
This browser can't save data for this site right now, so this account won't be kept here. After you add it, download a backup — it will be the only copy.
Enter your passphrase to show this account's secret.
Anyone who sees this code or link can generate your sign-in codes. Scan it only with an authenticator you trust, then close this window.
Back up before you save
TOTP secrets cannot be recovered if you lose this device or forget your passphrase. Download an encrypted backup now — it uses a passphrase you choose (can be the same as your vault).