Support

1. 1Open Google Authenticator on your phone.
2. 2Tap the ⋮ menu (top right) → Transfer accounts → Export accounts.
3. 3Pick the accounts and tap Next. Your phone now shows a QR code.
4. 4In the extension, choose Scan QR with cameraand point your computer's camera at the phone screen.

No camera on your computer? Photograph the QR code with another device, send the picture to your computer, and use Add account → QR code → Choose image instead.

One QR code can carry several accounts at once — Google Authenticator exports them in a batch, and we import the whole batch in one go.

Almost always the computer's clock. These codes are generated from the current time, so if your clock is more than about 30 seconds out, every code you produce is refused.

• macOS:System Settings → General → Date & Time → turn on “Set time and date automatically”
• Windows:Settings → Time & language → Date & time → “Set time automatically”, then “Sync now”
• Linux:enable NTP / automatic date & time

Reopen the extension afterwards. If codes are still refused, check that you added the account to the right service — a code from the wrong entry looks identical to a wrong code.

Most other authenticator apps deliberately do not let you export your accounts, so there is no file to move. You have to set each account up again — a couple of minutes each:

1. 1On the service's website, turn two-factor authentication off.
2. 2Turn it straight back on. It shows you a new QR code.
3. 3Add that QR code here.

Do one service at a time, and keep the old app installed until you have checked that a code from here is actually accepted. Deleting the old app first is how people lock themselves out.

Use the recovery code you saved when you turned password protection on: open the extension, click Forgot your password? on the lock screen, enter the code and choose a new password.

If you have neither the password nor the recovery code, the accounts cannot be recovered — not by you and not by us. There is no master key and no server-side copy; that is what makes the encryption meaningful. You would need to turn two-factor authentication off and on again on each service, using their own recovery codes to get in.

If you have a backup file, use Settings → Import and choose it. Password-protected backups will ask for that password.

If you did not export one, the extension keeps automatic local snapshots of the last seven days — they survive an accidental deletion, but not uninstalling the extension or wiping the browser profile.

To have accounts appear on a second computer, sign both Chrome browsers into the same Google account and leave Sync across devices on in Settings.

Put it on the feature board. You can see what other people have already asked for, add your vote instead of a duplicate, and follow what we are actually building next.

Something broken rather than missing? Mail support@authenticator.sh instead — bugs get fixed, they don't get put to a vote.

Please do not send vulnerability reports to the support address — that inbox is not treated as confidential. Write to security@authenticator.sh instead. Our security policy sets out scope, response times and safe-harbour terms.

Write to support@authenticator.sh. It helps to include your browser version and what you were doing when it went wrong.

Never send us a secret key, a QR code image or a backup file. Anyone holding those can generate your codes, and we have no need for them to help you.

Curious how the extension works under the hood? See How it works, and Privacy for what is stored where.