2FA Authenticator

TOTP (Time-based One-Time Password) is an algorithm that generates a unique numeric code based on the current time and a shared secret key. It is the standard behind most 2FA authenticator apps like Google Authenticator, Authy, and Microsoft Authenticator. The code changes every 30 seconds (by default), making it much harder for attackers to gain access even if they know your password.

Yes, when built correctly. Our tool runs entirely in your browser — no secret keys are ever sent to any server. The TOTP algorithm is computed locally using JavaScript, and your saved accounts are stored only in your browser's localStorage. For added security, you can export your accounts as an AES-256 encrypted backup file.

Yes! Your accounts are stored in your browser's local storage and will persist across sessions. However, clearing your browser data or using private/incognito mode will delete them. We strongly recommend using the Export feature to create encrypted backups of your accounts.

You can import any account that uses the standard otpauth:// URI format. If you have a QR code image from your service provider, you can upload it directly. You can also manually enter the secret key provided during the 2FA setup process.

If you clear your browser data without backing up, your saved accounts will be permanently lost. You would need to re-enroll 2FA with each service using their account recovery process. To prevent this, always export an encrypted backup of your accounts and store it safely.