// privacy-first · offline-ready · open source
Your 2FA toolbox,
running entirely on your machine.
Air-gapped session active
Stateless Decoder
Paste secret. Generate code.
RFC 6238 TOTP. 100% client-side. Nothing leaves this tab.
Live TOTP
18
---·---
Awaiting key input
Next code (preview)
--- ---
Scan to import into another authenticator
Trust Indicators
Verifiable, not vibes-based.
0% Server Interaction
Every cryptographic operation — Base32 decoding, HMAC, truncation — runs in your browser. The network tab stays empty by design.
0 outbound requests
E2EE Sync via WebDAV
Optional sync to your own Nextcloud / Fastmail / Synology box. Vault is sealed with XChaCha20-Poly1305 before it ever leaves the device.
XChaCha20-Poly1305
BIP39 Master Key
Recover your vault from a 24-word mnemonic. Compatible with hardware wallets — your seed, your sovereignty.
24-word mnemonic
Argon2id KDF
Master passphrase stretched with memory-hard Argon2id (m=64MB, t=3). Brute force is economically infeasible.
m=64MB · t=3