Two-factor authentication (2FA) adds an extra layer of protection on top of your password. KeyPass Authenticator supports TOTP-based 2FA—the same standard used by Google Authenticator, Authy, and most websites—so you can store setup keys for your accounts, view live codes in Authenticator, and autofill verification codes when you sign in on iPhone, iPad, and Mac.
Note
KeyPass Authenticator cannot turn on 2FA on a website for you. You must enable 2FA in the site’s security settings first, then add the setup key or QR code to KeyPass Authenticator.
How to add a 2FA Token?
Follow these steps to save a 2FA token in KeyPass Authenticator. Each token is saved as an authenticator account and appears in Authenticator under Accounts.
Step 1: Enable 2FA on the website or app
- Open the site or app’s Security or Account settings.
- Enable 2FA, 2-step verification, or authenticator app.
- Choose the authenticator app option (not SMS or email, if offered).
- The site shows a QR code or setup key (sometimes called a secret key).
- Add that token to KeyPass Authenticator using one of the methods below.
Step 2: Add the token to KeyPass Authenticator
Method 1: From Authenticator (recommended)
- Open Authenticator from the sidebar.
- Tap Add 2FA Token.
- Read the intro: Setting up 2-factor authentication (2FA) adds an extra layer of protection to your account.
- Choose Scan QR Code or Enter setup code.
- KeyPass Authenticator opens Add Account with 2FA prefilled—save the entry.
- The token appears under Accounts with a live code.
Method 2: Add to an existing password
- Open a authenticator account → Edit.
- In 2-factor authentication (2FA), tap Add 2FA Token.
- Follow the same Scan QR Code or Enter setup code flow.
- Save the entry—the live code appears on the detail/edit screen.
Method 3: Enter setup key manually
- Tap Enter setup code.
- Pick a site from the list or enter a custom site, then add account details.
- Paste the base32 setup key or full
otpauth://URL in the field (Enter setup key or otpauth:// URL). - Save the authenticator account.
Important
If you see Invalid setup key. Please try again., re-copy the key from the site, remove spaces and dashes, or paste the full otpauth:// URL.
Before you start
- 2FA enabled on the website or app — KeyPass Authenticator stores and generates codes after you set up 2FA on the site
- KeyPass Authenticator installed with your vault unlocked
- Camera permission (if you plan to Scan QR Code)
- KeyPass Authenticator set as Autofill provider (for 2FA Code autofill on iOS 18+)
- iOS 18 or later for 2FA code autofill (passkey autofill is separate and requires iOS 17+)
Tip
Open Autofill settings from KeyPass Authenticator → Settings → Autofill, or go to Settings → Passwords → Password Options → AutoFill Passwords and select KeyPass Authenticator.
Use the Authenticator screen
- Open Authenticator from the sidebar.
- Under Accounts, find your login.
- View the live 6-digit code (refreshes every 30 seconds).
- Watch the countdown timer to know when the code expires.
- Tap Copy or use Copy 2FA Token to copy the current code.
- Paste the code into the website or app.
Empty state: “No 2FA tokens yet. Add 2FA to a authenticator account to see it here.”
Copied confirmation: “2FA token copied to clipboard”
Autofill 2FA codes
Requires KeyPass Authenticator Autofill enabled and iOS 18 or later.
- On a verification screen, invoke KeyPass Authenticator Autofill.
- Choose 2FA Code.
- If your saved login matches the site, KeyPass Authenticator fills the current code automatically.
- If there is no match, pick a token from the list of all 2FA tokens.
- If no tokens exist: “No 2FA tokens found. Add an authenticator account in KeyPass Authenticator first.”
Note
2FA autofill is separate from passkey sign-in. Passkeys require iOS 17+; 2FA code autofill requires iOS 18+.
Copy a 2FA code without Autofill
- Authenticator — tap the copy button on any token
- Password detail or edit screen — tap Copy 2FA Token
- Password list — long-press a login → Copy 2FA Token (if 2FA is configured)
Change or remove 2FA
Change 2FA Token when a site rotates your secret:
- Edit the password → Change 2FA Token, or
- Re-scan / re-enter the new setup key
Remove 2FA:
- Authenticator: swipe the token → Remove 2FA, or use the menu (⋯)
- Edit password: choose Remove 2FA
Confirmation: Remove 2FA from [account]? Your authenticator account will be kept.
Your authenticator account remains; only the 2FA secret is deleted.
Backup, restore, and new device
Important
Unlike passkeys, 2FA setup secrets are included in KeyPass Authenticator backups. After you restore on a new device, your 2FA tokens should work immediately—no re-registration required.
| 2FA (TOTP) | Passkeys | |
|---|---|---|
| Included in backup | Yes (setup secret) | Metadata only |
| After restore | Codes work right away | Must re-register per site |
What is 2FA and how KeyPass Authenticator supports it
2FA (two-factor authentication) asks for something you know (your password) and something you have (a time-based code). KeyPass Authenticator generates TOTP codes—a 6-digit number that refreshes every 30 seconds.
KeyPass Authenticator stores each 2FA setup secret as its own authenticator account. That means:
- Each 2FA token is saved as an authenticator account
- Authenticator shows all logins with 2FA in one place
- Backup and restore includes 2FA secrets (unlike passkeys)
- Removing 2FA keeps your password; only the token is deleted
Where to find 2FA in KeyPass Authenticator
- Sidebar → Authenticator
- Password entry → Add/Edit → 2-factor authentication (2FA)
- Password list → long-press → Copy 2FA Token (if configured)
- KeyPass Authenticator Autofill extension → 2FA Code
2FA vs passkeys
| 2FA (TOTP) | Passkeys | |
|---|---|---|
| What it is | 6-digit time-based code | Passwordless sign-in |
| Stored in vault | Setup secret (yes) | Metadata only |
| Private key export | Secret included in backup | Private key stays in device Keychain |
| After restore/new device | Works immediately | Must re-register on each device |
| Autofill | 2FA Code (iOS 18+) | Sign-in with passkey (iOS 17+) |
| Typical use | Second step after password | Replaces password entirely |
What KeyPass Authenticator does not support
KeyPass Authenticator does not support:
- SMS-based 2FA codes
- Email verification codes
- Push notification approval (e.g. “Approve sign-in”)
- HOTP / counter-based tokens
- Import from Google Authenticator export files (unless you have the setup key or QR)
- Standalone tokens not saved as an authenticator account
Troubleshooting
| Problem | Solution |
|---|---|
| Invalid setup key | Re-copy from the site; remove spaces/dashes; try the full otpauth:// URL |
| Code not accepted by site | Check device time is correct; wait for the next 30-second code |
| No tokens in Autofill | Add an authenticator account first; ensure KeyPass Authenticator Autofill is enabled |
| Autofill doesn’t auto-match | Pick the token manually from the 2FA Code list |
| QR scan fails | Use Enter setup code and paste the manual key instead |
| Token missing after restore | Restore from a backup that includes the authenticator accounts |
| 2FA not configured | Shows 2FA not configured until you add a token to the password |
Security notes
- 2FA secrets are stored in your encrypted vault
- Copied codes can auto-clear based on KeyPass Authenticator clipboard timer settings
- Do not share setup keys or QR code screenshots
- Protect your vault with master password, Face ID/Touch ID, PIN, and auto-lock
FAQ
What is 2FA and how does KeyPass Authenticator support it?
Two-factor authentication (2FA) adds a time-based one-time code (TOTP) on top of your password. KeyPass Authenticator stores 2FA setup keys with your authenticator accounts and generates current codes in the Authenticator tool and Autofill extension.
How do I add a 2FA token to a password?
Open Authenticator from the sidebar, tap Add 2FA Token, then scan the site’s QR code or enter the setup key manually. KeyPass Authenticator creates a authenticator account with the token attached. You can also add or change 2FA when editing an account.
What is the Authenticator screen used for?
Authenticator lists every login that has 2FA configured. Each entry shows a live 6-digit code that refreshes every 30 seconds, a countdown timer, and a copy button for quick sign-in.
Can I scan a QR code to set up 2FA?
Yes. During setup, tap Scan QR Code in the 2FA flow. KeyPass Authenticator reads standard otpauth:// QR codes used by most websites and apps, then fills in the setup key and account details for your authenticator account.
Can KeyPass Authenticator autofill 2FA codes when I sign in?
Yes. When a site or app asks for a verification code, open KeyPass Authenticator Autofill and choose 2FA Code. If your saved login has a matching token, KeyPass Authenticator supplies the current code. You can also pick from all tokens in the list. Requires iOS 18 or later.
How do I copy or remove a 2FA token?
Tap the copy button on a token in Authenticator or on the password detail screen. To remove 2FA, swipe the token in Authenticator or choose Remove 2FA when editing the account—your authenticator account is kept.
Need more help?
Contact KeyPass Authenticator support:
Email: support@navynexa.com
Website: https://www.navynexa.com
KeyPass Authenticator is developed by Navynexa Technologies LLP