AuthSupport
Write to us
Tell us your device and the app version from Settings → About. Never send a secret key, a QR code, a backup file or your password — we will never ask for them.
Security issues
Found a vulnerability? Please tell us privately first. We reply within a few days and credit reporters who want it.
I forgot my master password
On the unlock screen, choose Use recovery code and enter the code Auth showed you when you created the vault. Then choose a new one in Settings → Security → Change master password.
If you have neither the password nor the recovery code, the vault cannot be opened. That is not a policy we could make an exception to: the encryption is designed so that nobody, including us, can get in without one of them. If you have an exported backup, you can restore it with that backup's own password.
Moving to a new phone or computer
- Encrypted backup: Settings → Backup & import → Save an encrypted backup. Choose a password for the backup, move the file to the new device, and open it there with Settings → Backup & import → Restore from a backup.
- One account at a time: open an account's menu, show its setup QR code, and scan it with Auth on the new device.
- Android to Android: Android's own transfer may bring the vault across. You will need your master password on the new phone; fingerprint unlock has to be turned on again there.
I lost my phone
The vault on the lost phone is encrypted, so whoever has the phone cannot read your codes without your master password. To keep access to your accounts, restore your most recent backup on another device. If you have no backup, use each service's own recovery codes or account recovery, and set up two-factor again.
This is why we suggest exporting a backup whenever you add an important account.
A code is rejected
Codes depend on your device's clock. Turn on automatic date and time in your system settings. If the service still rejects the code, check you are using the account it was set up with — the list shows the account under each name.
Importing from another app
Choose Add → Move from another app. Auth reads exports from Google Authenticator, Aegis, 2FAS, Ente Auth, Bitwarden and andOTP, and any file of otpauth:// links. Authy has no export, so accounts there have to be set up again; the app explains how.
Deleting your data
Auth has no accounts, so we hold nothing about you to delete. Everything is on your device: delete individual accounts in the app, or uninstall Auth to remove the vault entirely. Remember to delete any backup files you exported, too.