Real TOTP codes
RFC 6238 codes generated on-device, with countdown rings, search, sorting and pinned favourites.
KeyAuthyZero-knowledge vault
Unlimited two-factor tokens and unlimited passwords, plus passkeys — one vault your team can share safely, with no item caps and no subscription.
What's inside
Authenticator, password manager, passkey store and recorder share the same encryption, the same unlock and the same sync.
RFC 6238 codes generated on-device, with countdown rings, search, sorting and pinned favourites.
Store logins, generate strong passwords, import from Chrome or Apple Passwords and export clean CSV.
Unlock with Touch ID, Face ID or Windows Hello, with a master passcode always available as fallback.
Spot reused and weak passwords across your logins, with a clear prompt to update the ones at risk.
Pinned tokens and passwords are mirrored encrypted on-device, so the vault still opens with no signal.
AES-256-GCM with a PBKDF2 key that never leaves your device. The server only ever holds ciphertext.
Built for clinics
Invite approved teammates on your clinic domain so they can reach shared tokens and passwords, while ownership, backups and re-keying stay with you.
Google sign-in restricted to the vault owner and staff on your clinic domain, with an approval step before anything decrypts.
Choose exactly which tokens and passwords your team can see. Everything else stays private to you.
Encrypted backup and restore, plus a guided passcode change that re-encrypts every row with progress you can watch.
Chrome extension
The KeyAuthy extension puts live two-factor codes, pinned logins and autofill one click away — decrypted locally, never leaving the popup.
Google · drfrafiq
Pinned
Stripe
Expires in 12s
AWS · root
Expires in 24s
epic.example-health.com
clinic@psychvisit.today
github.com
drfrafiq
notion.so
Passkey
Live TOTP codes with the countdown ring, one click to copy, and the clipboard wiped automatically after 30 seconds.
The tokens and logins you pin in the vault stay pinned in the popup, so the account you need is the first thing you see.
Copy a code or login straight from the popup and paste it into the site you're on, without opening the full vault.
The popup decrypts locally with your master passcode. Nothing is stored in the extension and nothing plaintext is synced.
Version 1.4.6 · Unzip · chrome://extensions · Developer mode · Load unpacked
The extension reads your vault only after you unlock it, keeps decryption on your device, and never sells or shares data. Read the privacy notice. Not affiliated with Twilio or Authy.
Sign in with your approved account and the vault unlocks with a passkey in seconds.
Open KeyAuthy