TOTP Authenticator

What Is TOTP?

TOTP (Time-based One-Time Password) is the technology behind two-factor authentication (2FA) codes. Many services (Google, GitHub, Amazon, etc.) offer 2FA — after entering your password, you also enter a 6-digit code that changes every 30 seconds. DavianVault can generate these codes for you, replacing apps like Google Authenticator or Authy.

What You See

The TOTP Authenticator is accessible from the Tools tab. When you open it:

If you have no 2FA codes yet:

• A large icon and heading: "No 2FA Codes"
• Instructional text explaining what TOTP is
• Two buttons: "Scan QR Code" and "Add Manually"

If you have 2FA codes:

• A scrollable list of TOTP cards, each showing:
  • The service name (e.g., "Google", "GitHub") and account name
  • A large 6-digit code in monospace font
  • A countdown circle showing seconds remaining before the code refreshes
  • A progress bar showing time remaining — turns red when less than 5 seconds remain
  • A menu icon (⋮) with "Edit" and "Remove" options

In the top bar:

• A "Scan QR Code" icon button
• An "Add Manually" icon button

How to Add a 2FA Code

Option 1: Scan a QR Code (Recommended)

1. Tap the "Scan QR Code" button
2. A camera viewfinder opens
3. Point your camera at the QR code shown by the service you're setting up 2FA for
4. The app reads the QR code and adds the TOTP entry automatically

Option 2: Add Manually

1. Tap "Add Manually"
2. A dialog appears with three fields:
   • Secret Key (required) — the long string of letters/numbers provided by the service (often called a "setup key" or "secret")
   • Issuer (optional) — the service name (e.g., "Google")
   • Account (required) — your account name or email for that service
3. Tap "Add"

How to Use a 2FA Code

1. Open the TOTP Authenticator
2. Find the service you need a code for
3. Tap the card to copy the current code to your clipboard
4. A message confirms the code was copied and the clipboard will auto-clear in 30 seconds
5. Paste the code into the service's 2FA prompt

The code refreshes every 30 seconds. The countdown circle and progress bar show how much time remains. When less than 5 seconds remain, the display turns red — wait for the next code if you're running low on time.

Managing 2FA Entries

Edit an Entry

1. Tap the menu icon (⋮) on the TOTP card
2. Choose "Edit"
3. Update the fields as needed
4. Save

Remove an Entry

1. Tap the menu icon (⋮) on the TOTP card
2. Choose "Remove"
3. Confirm the removal in the dialog

Warning: Removing a TOTP entry from DavianVault does not disable 2FA on the service itself. Make sure you have an alternative way to generate codes or disable 2FA on the service before removing it here.

Important Notes

• Codes refresh every second on screen — you always see the current valid code
• The countdown timer shows exactly when the code will change
• If scanning a QR code fails, you'll see an error message — try again or use manual entry
• Both the secret key and account are required for manual entry