Built-in TOTP authenticator

One app for
passwords and
verification codes.

ZZPass has a built-in authenticator. Add your two-factor codes right alongside your passwords — no more switching apps, no more fumbling. Scan a QR code, and you're done.

Download for
iOS & iPadOS
Download for
macOS

Replaces every standalone authenticator app — free for all users.

Two apps for one login

You shouldn't need two apps
to sign into one account.

The standalone authenticator made sense in 2010. In 2026, your password manager should already do it.

A AUTH
⇄
L LOGIN
PAIN · 01
App switching
You're signing in. The site asks for a code. You switch apps, find the account, copy, switch back, paste — and the code just expired.
VAULT
+
2FA
PAIN · 02
Separate backups
Passwords in one app. 2FA codes in another. Lose your phone and you're recovering two things, not one — assuming you backed both up.
⊘
PAIN · 03
No sharing
Sharing a login with your partner? You can share the password — but the verification code is stuck on your phone. Cue the text messages.

ZZPass puts passwords and verification codes in the same place.
One vault. One backup. One app.

How it works

Add a code in
about ten seconds.

Scan a QR code or paste a setup key. ZZPass takes care of the rest — generating, refreshing, copying.

Scan
Camera detects
Or paste
JBSWY3DP
EHPK3PXP
Base32 key
STEP · 01
Scan or enter
Open any credential and tap "Set Up Verification Code." Scan the QR code from the website — or paste the setup key manually.
Mercury
mercury.com
Code
123 456
STEP · 02
Codes appear instantly
Your code shows up right in the credential, with a live countdown ring. It refreshes automatically — no tapping, no waiting.
z
Mercury
m.koen@hello.com · password
Filled
Clipboard
418 902
Ready · paste
STEP · 03
Autofill does the rest
When you log in, ZZPass autofills your password and copies the code to your clipboard — automatically. Paste and go.
The countdown

Live codes,
always ready.

The countdown timer is the heart of the experience. Watch a code refresh — feel the small satisfaction of seeing the ring tick down, transition, and reset. It's how you know it's working.

Copied to clipboard
837 204
22 SECONDS
Plenty of time
  • Auto-refresh every 30 seconds. Or 60. Or whatever the issuer specifies — ZZPass parses the period from the otpauth:// URI.
  • Blue ring with 5+ seconds left. Plenty of time. Copy or read it off; you've got room.
  • Orange under 5 seconds. Grab it now — or wait one breath for the next one. The transition is the visual cue.
  • Formatted for reading. "418 902" with a hard space — not "418902." Six digits, two glances.
  • Tap to copy, with a confirmation toast. A subtle haptic on iOS, an accessibility announcement on every platform.
The aha moment

Autofill your password.
Code copied automatically.

Two-factor sign-in collapses into one motion. Tap to autofill, paste the code that's already on your clipboard, done.

PANEL · 01
Password autofills
Email
m.koen@hello.com
Password
••••••••••••••••
✓ AUTOFILLED · FACE ID
→
PANEL · 02
Code copies, ready to paste
Verification code
123 456
Clipboard
418 902
Tap to paste
iOS 18+ · code shows directly in the system autofill bar — no clipboard needed.
Works across Safari, Chrome, and every app on iOS & macOS
"Copy verification code on autofill" — on by default, toggleable in Security settings
Clipboard auto-clears the moment the TOTP period ends
Local-only on iOS — no Universal Clipboard leakage
Standard
Support
RFC 6238
TIME-BASED ONE-TIME PASSWORDS
Full compliance
RFC 4226
HOTP — UNDERLYING STANDARD
Supported
otpauth://
SECRET · ISSUER · ALGORITHM · DIGITS · PERIOD
Full parsing
SHA-1
DEFAULT · MOST COMMON
Supported
SHA-256
EXTENDED ALGORITHM
Supported
SHA-512
EXTENDED ALGORITHM
Supported
6-digit codes
DEFAULT
Supported
8-digit codes
Supported
30-second period
DEFAULT
Supported
60-second period
Supported
Custom periods
Supported
The fine print

Works everywhere
2FA works.

If a service uses any TOTP authenticator, ZZPass works with it. Same QR codes, same setup keys, same six digits — backed by every major standard.

Compatible with every TOTP service. Same QR codes, same setup keys you'd use with any standalone authenticator app — paste them straight into ZZPass.
Email Banking Code hosting Cloud Chat Streaming Social Crypto + hundreds more
Add verification code
Detected · captured
otpauth://totp/Mercury:m.koen?secret=…
QR scanning

Point, scan,
done.

Real-time QR detection on iPhone and Mac. The frame highlights green the moment a valid otpauth:// URI is detected — no shutter, no manual confirmation.

  • iOS — AVFoundation  continuous frame analysis with green-bordered detection
  • macOS — Vision framework  the same accuracy on built-in or external cameras
  • Validates the QR contains a valid otpauth:// URI before saving
  • Falls back to manual key entry when a camera isn't available

No QR code? Paste the setup key.

ZZPass validates Base32 keys in real time and shows you the first generated code before you save — so you know it works before you commit.
Encrypted & synced

Your codes travel with you.

Add a code on iPhone, use it on Mac. Share a credential with your family and the verification code goes with it. No separate backup.

  • AES-256-GCM encryption. TOTP secrets stored with the same vault encryption as your passwords — never plaintext on disk.
  • iCloud sync, every device. Add on iPhone, use on Mac. Same vault, same codes, instantly.
  • Travels with shared credentials. Share a login with family or your team — the code comes with it.
  • One backup covers everything. Included in your Emergency Kit print — full otpauth:// URI preserved. Lose your phone, restore your vault, codes included.
iPHONE Mercury
Code
418 902
MAC Mercury
Code
418 902
Synced via iCloud · AES-256
FAMILY · SHARED Streaming
Code
726 381
EMERGENCY KIT Print backup
otpauth://totp/Mercury
:m.koen?secret=…&
issuer=Mercury
The case for consolidation

Why keep two apps
when one will do?

The trade-offs of running a dedicated authenticator alongside a password manager — and what changes when they're the same app.

Standalone authenticator
A separate app for codes.
  • ×
    Separate app to install & maintain
  • ×
    Codes disconnected from passwords
  • ×
    Separate backup & recovery needed
  • ×
    Can't share codes with family
  • ×
    App-switching during every login
  • ×
    Lost phone = lost codes (unless backed up separately)
ZZPass built-in
It's already in your password manager.
  • Already in the app you're using
  • Codes live right next to passwords
  • One backup covers everything
  • Share credentials — codes included
  • Auto-copied during password autofill
  • Lost phone = restore vault, codes included
Clipboard security

Auto-copies.
Auto-clears.

  • Expires with the code. Clipboard cleared the moment the TOTP period ends — 30s or 60s, in lockstep.
  • Local-only on iOS. Marked UIPasteboard.localOnly — never broadcast via Universal Clipboard.
  • Background clear on macOS. A small task watches the clock and clears on expiration, even if you forget to paste.
  • Accessibility-aware. VoiceOver announces "Copied to clipboard" on every copy.
CLIPBOARD · LOCAL ONLY EXPIRES IN 09s
418 902
Auto-clears on TOTP expiration · UIPasteboard.localOnly
Use cases

From inbox to infrastructure.

Wherever 2FA matters, ZZPass keeps the password and the verification code in the same place.

PERSONAL · 01
Personal accounts
Email, banking, social. Every account gets 2FA — and every code lives next to its password. One vault, one source of truth.
FAMILY · 02
Family sharing
Share a streaming login or utility account with your partner. The verification code goes with it — no texting six digits back and forth at midnight.
WORK · 03
Work accounts
2FA for code hosting, cloud, chat, every internal tool. Share team credentials through encrypted groups — codes included.
FAQ

Common questions.

Can I import codes from a different authenticator?+
You can add the same codes to ZZPass by re-scanning the QR code from each service's 2FA settings page. ZZPass uses the same otpauth:// standard as every major authenticator — same QR codes, same setup keys.
Does ZZPass support 8-digit codes and 60-second intervals?+
Yes. ZZPass parses every parameter from the otpauth:// URI — custom digit counts, time periods, and algorithms (SHA-1, SHA-256, SHA-512). Whatever the issuer specifies, ZZPass reproduces.
What happens if I share a credential that has a TOTP code?+
The verification code goes with it. Group members see the live countdown and can copy codes from their own devices — the secret travels through ZZPass's end-to-end encrypted shared groups (ECIES P-256).
Do codes autofill like passwords?+
On iOS 18+, codes appear directly in the system autofill bar. On every version, ZZPass auto-copies the code to your clipboard the moment it autofills your password — paste into the verification field, done.
Is the authenticator free?+
Yes. The built-in authenticator is available to every ZZPass user, including the free tier. No subscription, no upgrade prompt, no asterisk.

One less app
on your phone.

Passwords, passkeys, and verification codes — all in ZZPass.

Download for
iOS & iPadOS
Download for
macOS

COMPATIBLE WITH EVERY SERVICE THAT SUPPORTS A TOTP AUTHENTICATOR · FREE FOR ALL USERS