FAQ
Before you begin,
a little clarity.
About using keyfold, staying safe, and what comes next.
01Can I download keyfold now?
Not yet. The Apple standalone app is in development, with no public installer or TestFlight access. The download page will be updated at release.
02Is keyfold a password manager?
The current focus is time-based one-time passwords (TOTP), commonly used for 2FA. API key management is planned. General website password management is not currently offered.
03Do I need a keyfold account?
The current Apple standalone flow does not require registration. Create a local vault, save your recovery code, and set a local PIN.
04How do the PIN and recovery code differ?
The six-digit PIN unlocks this device day to day. The recovery code restores vault access and is intended for future cross-device use. A PIN cannot replace it. Store the recovery code separately and safely.
05What if I forget my PIN or lose my recovery code?
You can currently reset the local PIN with the recovery code. There is no server-side recovery service. Without a working unlock method or recovery code, you may lose access. Keep your recovery code and original authenticator as backups.
06Can I import from Google Authenticator or Proton?
The development build supports pasting Google Authenticator migration QR contents and multiple otpauth:// links, with batch collection, preview, deduplication, and result reports. Continuous camera scanning and real Google exports still need validation. Proton import is not implemented yet.
07Is multi-device sync available?
Not yet. Encrypted backup and restore are implemented. Multi-device sync through your own WebDAV, S3 / R2, Google Drive, or other supported storage is still planned.
08Can the website demo codes sign me in?
No. The homepage uses fictional accounts and sample numbers to demonstrate copying and the countdown. It does not read or store real secrets.
09How can I report issues or contribute?
Open a GitHub Issue or contribute a Pull Request. Never include real secrets, recovery codes, migration QR codes, or unredacted vault files in public reports.
Still curious?
Read the privacy page or talk with us on GitHub.