Two-factor authentication

Your codes.
Your phone.
Nowhere else.

Vault2FA generates the six-digit codes that keep your accounts safe — and keeps the secrets behind them in your iPhone's Keychain, not on somebody's server.

Get Vault2FA How it stays private
No account No server No tracking Open backup format
Built for every day

Fast when you're in a hurry. Careful when it counts.

The things you do fifty times a week are one tap. The things you do once a year are impossible to get wrong.

Search that never scrolls away

The search bar is pinned under the title. Forty accounts or four hundred, the one you need is two keystrokes away.

Favourites on top, your order

Pin the accounts you use most to their own section. Drag anything anywhere. The list is yours, not an algorithm's.

Codes as big as you like

One tap to change the size — or pinch the list. From compact to read-it-across-the-room, the layout keeps up.

Face ID, twice

Once to open the app, and again before a secret is ever shown on screen. The app blurs itself the moment you switch away.

Every way in

Scan a QR code, import a screenshot, paste a setup link, or type a secret with a live preview. Bulk-import from other authenticators' export codes.

Standards, not lock-in

TOTP and HOTP over SHA-1, SHA-256 and SHA-512. Reveal any secret as text or a QR code and move it to another app whenever you like.

Privacy by construction

There is nothing to leak, because there is nothing there.

  • No server Vault2FA has no backend and no network code of its own. There is no account to create and nothing to breach.
  • Device-only Keychain Secrets are stored with Apple's strictest protection class. They aren't copied to iCloud Keychain, and they aren't in your device backups.
  • No analytics, no third-party code Zero SDKs. The App Store privacy label reads "Data Not Collected" because that is literally true.
  • Deliberate exports only Data leaves the phone in exactly one way: an encrypted backup you make on purpose, protected by a passphrase only you know.
Secrets stored in
iPhone Keychain
Protection class
Device-only, when unlocked
Synced to iCloud
Never
Included in backups
Never
Network requests
None
Third-party SDKs
None
Data collected
None

Read the full privacy policy. It is short, because there is little to say.

{
  "format":  "vault2fa-backup",
  "version": 1,
  "kdf": {
    "name":       "pbkdf2-hmac-sha256",
    "iterations": 600000,
    "salt":       "…"
  },
  "cipher": {
    "name":  "aes-256-gcm",
    "nonce": "…"
  },
  "ciphertext": "…"
}
Backups you own

Encrypted, portable, and documented down to the byte.

An export is a single file, protected with AES-256-GCM and a passphrase you choose. Inside are standard otpauth:// links any authenticator can import.

The format is published, and a forty-line script opens it without the app. If Vault2FA vanished tomorrow, your codes wouldn't.

Read the format spec
Questions

Things people ask before they switch.

Why doesn't it sync between my devices?

Because syncing means your secrets exist on a server, and not having that is the point. Move accounts between devices deliberately, with an encrypted backup — it takes a minute.

I'm coming from Authy or Google Authenticator. How hard is the move?

Export from the old app, point Vault2FA's scanner at the codes it produces, review the list, tap Import. Bulk imports handle ten accounts per code.

What happens if I lose my phone?

Restore from your encrypted backup on the new phone with the passphrase. If you never made one, the secrets are gone — use each service's recovery codes. That is the honest trade-off of not having a server, and it is why the app reminds you when a backup is out of date.

Which standards does it support?

TOTP (RFC 6238) and HOTP (RFC 4226), SHA-1, SHA-256 and SHA-512, six to eight digits, any period. Verified against the RFCs' published test vectors.

Is it open about how it works?

The backup format is fully documented with a reference decryptor. The app itself contains no third-party code and makes no network requests — you can verify that with any network monitor.

Available for iPhone

Take your codes back.

Vault2FA is free. It requires iOS 18 or later and works on any iPhone with Face ID or Touch ID.

Download on the App Store