Add accounts your way
Scan a setup QR code with your camera, upload a QR image, paste an otpauth link, or enter the secret manually.
Simple two-step verification
Your codes. Ready when you are.
ByteSquish Authenticator keeps your time-based verification codes together in a secure mobile browser vault, with encrypted sync and easy account transfer.
No app installationMobile browser onlyStandard TOTP support
ByteSquish
Authenticator
ByteSquish setup
Add verification code
Scan QR Enter key
Scan a setup QR code
Fast, private, and ready in seconds
Start secure setup
TOTP
6 and 8 digit codes
AES-256-GCM
Encrypted secrets at rest
2 minutes
Automatic vault lock
Mobile first
Protected phone access
Everything you need
A familiar authenticator, built for the browser
Add existing accounts, create rotating verification codes, and move your data with controls designed for a secure mobile workflow.
Move from Google Authenticator
Import supported Google Authenticator transfer QR codes, then export your saved accounts when you need to move again.
Encrypted account sync
Your entries stay connected to your ByteSquish account, with TOTP secrets encrypted at rest using AES-256-GCM.
Passkey or PIN vault
Unlock your vault with a passkey or a six-digit PIN. It locks automatically after two minutes of inactivity.
Review ByteSquish sign-ins
Receive supported sign-in requests, compare the displayed code, then approve or deny the request from your phone.
Access visibility
Review the most recent Authenticator access time, device, and permission-based location from your profile dashboard.
Get started
From setup to sign-in in four steps
The flow is designed to feel familiar if you have used Google Authenticator or another TOTP app.
- 01
Open on your phone
Sign in with your ByteSquish account from a supported mobile browser. Desktop and desktop-site mode are restricted.
- 02
Secure your vault
Create a passkey or six-digit PIN. The vault adds a separate lock in front of your saved verification accounts.
- 03
Add or import accounts
Scan, upload, paste, enter manually, or import a Google Authenticator transfer QR code.
- 04
Use the current code
Open an entry and use its rotating TOTP code on the service asking for two-step verification.
Security around every vault visit
Before the vault opens, ByteSquish checks the browser environment, connection, location permission, account session, and vault credential.
HTTPS browser checks
Passkey or PIN unlock
Automatic vault locking
Latest access visibility
Designed with clear boundaries
Know how your codes are protected
Encrypted storage
TOTP secrets are encrypted at rest. They are decrypted for an authenticated, unlocked browser so it can generate a current code.
A separate vault lock
Your ByteSquish sign-in and your vault credential protect different stages of access. The vault locks again automatically.
Recovery remains essential
Authenticator codes are not a replacement for service recovery codes. Store those codes somewhere separate and safe.
Questions answered
Before you begin
What accounts can I add?
You can add services that provide a standard time-based one-time password setup secret or otpauth:// TOTP QR code. Counter-based HOTP accounts are not supported.
Can I import from Google Authenticator?
Yes. In Google Authenticator, choose Transfer accounts and Export accounts. ByteSquish can scan or upload the resulting transfer QR codes, including multi-part transfers.
Where are verification codes generated?
After you unlock the vault, the encrypted account secret is delivered to your authenticated mobile browser over HTTPS and the current TOTP code is generated there.
Why is location permission required?
The security gate uses location permission before opening the Authenticator and records the latest successful access location, device, and time for review in your ByteSquish profile.
Can I use it on a desktop browser?
The Authenticator vault is restricted to supported mobile browsers. Desktop browsers and mobile browsers using desktop-site mode are sent to the mobile-only notice.
What happens if I lose access?
Keep the recovery codes supplied by every service in a separate safe place. Those recovery codes are the dependable way to regain access if your authenticator or ByteSquish account is unavailable.
Keep your next sign-in within reach
Open ByteSquish Authenticator on your mobile browser, secure your vault, and add your first account.
Open AuthenticatorRequires a ByteSquish account and a supported mobile browser.