Terms of Service

By accessing or using 2FA Authenticator (the "platform", "service", or "we"/"us"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree with any part of the Terms, you must stop using the platform and delete any data you have stored with it. The Terms apply equally to account-based usage and to anonymous browser-only usage.

These Terms may be updated from time to time. The version in force is the one published at this URL at the time you use the service. Material changes, where practical, will be reflected in the "last updated" date above.

2FA Authenticator is a free, web-based two-factor authentication (2FA) code generator. It lets you store TOTP/HOTP setup keys and displays the resulting one-time codes. In browser-only mode, credentials are saved in your own browser's local storage and never leave your device. In account mode, credentials are stored — encrypted with AES-256-GCM — on our infrastructure so they can sync across your devices.

The platform is an independent tool. It is not affiliated with, or endorsed by, any of the services whose 2FA keys you may store in it.

The platform is provided "as is" and "as available", without warranties of any kind, whether express or implied. To the fullest extent permitted by law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement.

We do not warrant that the service will be available at any particular time, that codes will always be correct or timely, that data will never be lost or corrupted, or that the service is free of bugs or security flaws. Online services can fail, databases can be lost, accounts can be compromised. You use this platform entirely at your own risk.

You are strongly encouraged to keep your original setup keys and recovery codes somewhere safe outside this platform, so that you can always regain access to your accounts if this service becomes unavailable, if your stored data is lost, or if you lose your account password.

To the maximum extent permitted by applicable law, the operator of this platform shall have no responsibility or liability to you or anyone else for any damages arising out of or relating to your use of (or inability to use) the platform, including but not limited to:

• Being locked out of any account whose 2FA secret was stored here;
• Loss, corruption, theft, or disclosure of stored credentials or other data;
• Any direct, indirect, incidental, special, or consequential damages;
• Financial losses, business losses, or loss of data or profits;
• Any harm resulting from your own password choices or sharing of secrets.

Because the service is provided free of charge, we owe no duty of data recovery, no duty of backup, and no duty of uninterrupted service. If the service terminates, is deleted, or its data is lost — for any reason — that loss is yours to bear. Nothing here creates any obligation for us to restore anything.

Nothing about this platform constitutes a promise, guarantee, or commitment of any kind. Descriptions of features, security measures, or availability are informational statements about the current state of the service, not contractual promises. Features may be added, changed, suspended, or removed at any time without notice, and the entire service may be discontinued at any time.

Any statements about security (such as encryption at rest or password hashing) describe our practices, not an assurance that the platform is or will remain impenetrable. No online service can promise perfect security, and we do not.

Accounts use only a username and a password you choose. There is no email verification and no password recovery. If you forget your password, your account data cannot be recovered by us — this is a deliberate design choice to minimize the data the platform holds about you. You are solely responsible for remembering your credentials and for keeping them private.

You may delete your account at any time from the account menu. Deletion is immediate and removes your username, password hash, and every stored credential permanently.

The setup keys, names, and settings you store remain yours. You grant us only the limited technical right to store and process that content for the sole purpose of operating the service for you. We do not claim ownership of your credentials, do not read them for any purpose other than computing your codes, and do not share them with third parties.

You agree not to use the platform to break any law, not to attack or probe the service or its infrastructure, not to abuse rate limits, not to attempt to access other users' data, and not to store content you have no right to store. We may block abusive traffic or delete accounts that violate these rules.

The platform is free. There is no paid tier and no functional limit imposed on free usage. Donations are voluntary, do not purchase any service or priority, and are non-refundable once processed by the payment provider.

The platform runs on third-party hosting and database providers. Their availability, outages, and data-handling practices are outside our control, and their own terms apply to the underlying infrastructure. Your use of the platform is also subject to our Privacy Policy.

You may stop using the platform at any time and delete your account and local data. We may suspend or discontinue the service, or block specific abusive usage, at any time and for any reason, without notice and without liability, as described in sections 3–5.

The platform is not directed at children under 13. If you are under 13, do not create an account or store credentials here. If you become aware of an account held by a child under 13, contact us so it can be removed.

These Terms are governed by the laws of India, and any dispute arising from them shall be subject to the exclusive jurisdiction of the competent courts of India, without regard to conflict-of-law rules.

Questions about these Terms can be raised through the GitHub account listed in the footer of this site.