Z Pass← Back to web vault
Z PASS AUTHENTICATOR

Use your 2FA codes securely.

Z Pass generates time-based one-time verification codes for your accounts. Even if your password is compromised, a second verification layer helps keep your account safe.

Example verification codeNo personal information is shown
482 913
Refreshes in 30 seconds
🛡️
Security note
Never share your 2FA secret key with anyone. Store recovery codes somewhere safe, separate from your Authenticator entry.

What is two-factor authentication?

A normal login only uses your username and password. When 2FA is enabled, the site also asks for a temporary six- or eight-digit code generated by Z Pass. The code usually changes every 30 seconds.

Adding an Authenticator account to Z Pass

  1. Open the Security or Two-factor authentication setting on the website you want to protect.
  2. Choose the authenticator app option.
  3. In the Z Pass app, open the Authenticator section from the bottom menu.
  4. Tap ＋ Add account and scan the QR code, or enter the key manually.
  5. Confirm setup by typing the code Z Pass generates into the website.

Adding with a QR code

When the site shows a QR code, open the scanner inside Z Pass and frame the code. Camera access is only used during scanning. After checking the provider and account name on the preview screen, tap Save.

Adding a secret key manually

If the QR code doesn't work, use the site's "show manual setup key" option. Enter the key without spaces, and leave the algorithm and period at their default unless the site specifies a different value.

Using a code when signing in

  1. Sign in to the website with your username and password.
  2. When asked for a verification code, open the Z Pass Authenticator section.
  3. Copy the current code next to the account and enter it on the site before it expires.

✓ Each code is only valid for a short time, and the next code is generated automatically.

Encrypted cloud backup

The Back up now action in Profile encrypts your Authenticator entries on-device with your recovery password (or your vault-unlock code, if you've turned it on). To view codes in the web vault, enter that same key. The vault automatically locks after 30 minutes and the decryption key is removed from browser memory.