Privacy Policy

Last updated: October 27, 2026

Overview

2FA Auth is a browser-based tool that generates time-based one-time passwords (TOTP) for two-factor authentication. We designed it so that your sensitive data stays on your device.

What we do not collect

Your secret keys, generated codes, QR images and camera feed are processed locally in your browser. They are not sent to our servers, and we do not have accounts, sign-ups or a database of user data.

What is stored on your device

• Saved accounts: if you press Save Account, the account name and secret key are stored in your browser's local storage as plain text. They stay on your device until you delete them or clear your browser data.
• Theme choice: your light or dark mode preference.

Third-party services

Our pages are delivered by our hosting provider, and the QR reader library is loaded from a public content delivery network (such as jsDelivr or cdnjs). These providers may receive technical information such as your IP address and browser type when you load the page, according to their own policies.

Analytics and advertising

We do not currently use analytics or advertising. If we add them in the future, we will update this policy and explain what is collected.

Your choices

You can delete any saved account with the delete button, or clear your browser's site data at any time to remove everything stored by this site.

Children

This tool is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this page from time to time. The date at the top shows when it last changed.

Contact

This website is operated at 2faauth.us. Questions? Contact us at [email protected].