Before you start
- Use a normal browser window, not a private or incognito one. Private windows erase everything when they close.
- Each browser keeps its own vault. Pick the browser you'll use for signing in. You can copy your vault to others later with a backup.
- Want to look around first? Open the demo. It uses sample keys and saves nothing.
1. Create your vault
- Open 2fa-keyring.com/app.
- Choose a passphrase of at least 12 characters. Four or more random words, like copper lantern river mint, are strong and easy to remember. Don't reuse a password from another site.
- Type it again to confirm, then choose Create vault.
Nobody, including the people who make 2FA Keyring, can recover it. Write it down somewhere safe, or keep it in a password manager you trust.
2. Add an account
Go to the security settings of a service you use, and choose to set up two-factor authentication with an authenticator app. The service shows a QR code. Then in 2FA Keyring, choose Add key and use whichever is easiest:
- Setup key: most services have a link under the QR code to show the key as text. Copy it into the Setup key field, and add the service name.
- Link or QR image: paste an
otpauth://link, or choose a screenshot or photo of the QR code. It's read on your device. - Google Authenticator: import several accounts at once. See the migration guide.
While you type a setup key, 2FA Keyring shows the current code. Enter that code on the service's page to finish turning on two-factor. Save the recovery codes the service gives you somewhere separate from 2FA Keyring.
Service-specific tips are in Set up two-factor on popular services.
3. Make a backup
- Choose Backup, then Download backup file.
- Store the file somewhere you'll still have if this device is lost: a USB drive, or a personal cloud folder.
- Under Check a backup, choose the file you just saved and enter your passphrase. The app confirms it opens and lists what's inside, without changing your vault.
After you add, edit or remove keys, the app shows how many changes you've made since your last backup. Make a fresh one when it asks.
4. Sign in with a code
- When a site asks for a verification code, open 2FA Keyring and unlock your vault.
- Click the code next to the account to copy it, then paste it into the site. The ring shows how many seconds are left; the next code appears just before it changes.
Everyday use
- Find accounts fast: press / to jump to search. Star accounts to keep them at the top, and give them groups like Work or Personal (edit a key to set its group).
- Auto-lock: the vault locks after 5 minutes without activity. In Settings choose 1, 5 or 15 minutes or never, and optionally lock as soon as you switch tabs.
- Leaving the page locks the vault. You'll unlock it with your passphrase next time.