Free 2FA Authenticator

Your two-factor codes,
right in the browser.

FaiAuth generates secure TOTP login codes with zero sign-up and zero servers. Everything runs on your device — your secrets never leave it.

Open Authenticator User Guide

No accounts yet

Add your first account to start generating 2FA codes.

Add Account

Paste the secret key shown by the service when you enabled two-factor authentication.

Important: save your secret key somewhere safe (password manager or paper). If this browser's data is cleared, you will need the secret to restore your codes.
Where to find it: open the service's 2FA settings and choose "manual entry" or "can't scan the QR code" — it shows a text key like ABCD EFGH IJKL MNOP. Spaces are fine.
That doesn't look like a valid secret key. It should be letters A–Z and digits 2–7.

Export Backup

Download an encrypted backup of all your accounts. It is locked with AES-256 using your password — only you can open it.

Import Backup

Restore accounts from a FaiAuth backup file.

Complete User Guide

Everything you need to know about FaiAuth

📱 Adding an Account

  1. Go to the service (Google, GitHub, etc.) → Security → Enable 2FA
  2. Choose "Authenticator app" — it shows a QR code + secret key
  3. Copy the secret key (long text like JBSWY3DPEHPK3PXP)
  4. In FaiAuth → Add Account → paste name + secret → Save
  5. Enter the 6-digit code shown into the service to verify

💾 Backup — What & Why?

Your secrets are stored in browser localStorage. If you clear browser data, change devices, or reinstall — secrets are LOST forever!

Backup tab → Export: Downloads an encrypted file (.json) with all your accounts. Protected by a password YOU choose (AES-256 encryption).

Backup tab → Import: On a new device/browser, upload the backup file + enter password → all accounts restored!

⚠️ Save the backup file somewhere safe (USB, cloud drive). Without it + without original secrets, accounts cannot be recovered!

🔐 Security Notes

  • 100% offline — codes are pure math (secret + time). No internet needed after page loads.
  • Nothing leaves your device — no servers, no tracking, no sync.
  • Keep device clock accurate — wrong time = wrong codes!
  • Save original secrets from each service as ultimate backup.