Vault

Two-factor codes, protected by a password only you hold.

Encrypted in your browser with AES-256
Every user gets their own private vault
Zero-knowledge: your password is never stored or sent

TOTP · RFC 6238 · PBKDF2-SHA256 · AES-256-GCM

Vault

Welcome back

Sign in to view your codes.

Username

Setup code

The one-time code your administrator gave you. Password

Confirm password

Keep me signed in on this device

There is no password recovery. If you forget this password, your saved codes can't be decrypted.

Can't reach your vault. Check your connection and reload the page.

Vault Secure. Organize. Access.

Your vault

userEncrypted with your password

Quick Access

Jump straight to the accounts you use most.

Vault

0 of 500 accounts 0%

All accounts

Organize and manage all your accounts in one secure place.

Sort by:

No accounts yet

Add your first account by scanning a QR code, pasting an otpauth:// link, or entering a setup key.

No accounts match your search.

Add account

Import from a QR code

or paste a setup link

Paste an otpauth:// link, or a Google Authenticator otpauth-migration:// export (imports several accounts at once).

Account details

These accounts were found in the export. Uncheck any you don't want, choose a folder below, then import.

Account name Setup key (Base32 secret)

Folder (optional)

Advanced options

Digits Period (s) Algorithm

Edit account

Account name Folder

Rename folder

Folder name Renames the folder for every account inside it.

Move to folder

Moving

Folder Choose an existing folder, type a new name, or clear it for no folder.

Secret key

Scan this QR code with another authenticator app, or enter the key below manually.

Setup key (Base32 secret)

Anyone with this key can generate your codes. Only reveal it on a device you trust.

Change password

Your password is the encryption key, so every saved account is re-encrypted in this browser before anything is stored. Keep this page open until it finishes.

Current password New password

Confirm new password

Users

You control who can sign in. You can't read anyone's codes — each vault is encrypted with a key derived from a password the server never receives.

Username Role

One-time setup code for

Send this to them privately. It is shown once — if it's lost, reset the user to issue a new one.