How can I keep my two-factor authentication (2FA) codes secure in the Authenticator App?

Our Authenticator App by 2Stable protects your saved two-factor authentication (2FA) accounts with the password you set when creating your vault. The password, also known as the master password, is used to securely encrypt and decrypt your data. End-to-end encryption protects the data stored on your device and, if Sync & Backup is enabled, backed up to your iCloud account.

Face ID and Touch ID, also known as biometric authentication, offer a convenient way to access your authentication codes, but it’s important to consider who else can unlock your iPhone and your Authenticator App.

Here are a few simple ways to keep your authentication codes private:

• 🔐 Keep Your App Password Private
  Choose a strong Authenticator App password that is different from your iPhone passcode. Keep it to yourself, even if you share your device with family or friends.

• 👤 Know Who Can Use Face ID or Touch ID
  Your iPhone recognizes any face or fingerprint added to the device. Your device does not link a specific face or fingerprint to a specific online account or saved 2FA account. If someone else’s face or fingerprint was already added before you turned on Face ID or Touch ID in the Authenticator App, they may be able to unlock your vault and view your authentication codes.

• 📱 Use Your App Password on Shared Devices
  If you share a device with other people, such as a family Mac or iPad, keep Face ID and Touch ID access turned off in the Authenticator App. Use your master password to unlock your vault instead.

• 🛡️ Keep Biometric Access Personal
  If you prefer using Face ID or Touch ID in the Authenticator App, keep your iPhone passcode private and make sure only your own face or fingerprints are enrolled. Anyone who knows your passcode can add their own face or fingerprint, triggering a security check for access to the Authenticator App. You can manage your biometric settings under Settings → Face ID & Passcode or Touch ID & Passcode.

• 🗝️ Keep a Safe Copy of Your Password
  Store your Authenticator App password somewhere secure that only you can access. You may need it to restore your vault or when Face ID or Touch ID is unavailable.

Keeping access to your Authenticator App private helps protect the extra layer of security that two-factor authentication adds to your online accounts.

🔐 Note: If you use a password manager to save your online account passwords, check who can unlock it too. Someone who can access both your saved passwords and your authentication codes may be able to sign in to your accounts.

ℹ️ What is a security check for access to the Authenticator App? Since devices are often shared with family or friends, the Authenticator App adds an extra layer of protection. If a face or fingerprint is added, changed, or removed on your device, the app will ask for your master password before allowing Face ID or Touch ID again. Once you enter it, you can use biometrics again.