How can we help?
Answers to the most common questions about FairAuth. The app has its own help too, which works offline.
Frequently Asked
Often searched:
Getting Started
What is FairAuth?
FairAuth is an authenticator app for iPhone, iPad and Mac. It creates the short codes that many services ask for when you sign in, in addition to your password, such as Google, Microsoft or Amazon.
That second step protects your account: even someone who knows your password can’t get in without the code from FairAuth.
What is two-factor authentication?
Signing in with two steps: first your password, then a code that only your device creates. The code is valid for a few seconds, usually 30, and is then replaced by a new one.
Someone who finds out your password, for example from a data leak, still can’t get into your account. So turn on two-factor authentication wherever a service offers it.
Do I need an account or a phone number?
No. You install FairAuth and start, without signing up anywhere. Because there is no FairAuth account, there’s none that could be lost, locked or hacked.
Which devices does FairAuth run on?
- iPhone and iPad with iOS 18 or later
- Mac with Apple silicon (M1 or later) and macOS 15 or later
One purchase covers all three.
Does FairAuth work without internet?
Yes. Your device calculates the codes itself; no connection is needed for that. The help inside the app works offline too.
FairAuth only needs the internet for two things: iCloud sync, if you turn it on, and purchases in the App Store.
Can I try FairAuth safely first?
Yes. During setup, FairAuth shows you a practice account. It belongs to no real service, so you can’t get anything wrong. It shows you how to copy a code and what the time line below it means.
How do I copy a code?
- iPhone and iPad: tap the account.
- Mac: click the code.
Then paste it at the service. The code leaves the clipboard by itself as soon as it expires, after 60 seconds at the latest. With AutoFill you often don’t need to copy at all.
What does the line below the code mean?
It shows how long the code is still valid: it gets shorter until a new code appears. If it’s almost empty, it’s best to wait for the next one. In the last seconds FairAuth already shows it small next to the current code.
Which widgets and shortcuts are there?
- Widgets on the Home Screen and Lock Screen that open FairAuth or scan a QR code right away
- Controls in Control Center for the same
- Shortcuts to open FairAuth, scan, show your favorites and search
All of them only open the app. They never show codes or account names, so nobody sees them on your Lock Screen.
Which keyboard shortcuts are there?
On the Mac:
- ⌘N add an account, ⌘F search, ⌘L lock now
- ⇧⌘C copy the code, ⌥⇧⌘C next code of a counter-based account
- ⌘E edit, ⌘T tags, ⌘D favorite, ⌫ move to Recently Deleted
On the iPad with a keyboard:
- ⌘F search, ⌘C copy the code, ⌘N add an account, ⌥⌘I show or hide details
Which languages is FairAuth available in?
In 24 languages: Chinese (Traditional), Croatian, Czech, Danish, Dutch, English, Finnish, French, German, Greek, Hungarian, Italian, Japanese, Korean, Norwegian, Polish, Portuguese (Portugal), Romanian, Slovak, Slovenian, Spanish, Swedish, Turkish and Ukrainian.
FairAuth follows the language of your device.
Is there a dark mode?
Yes. FairAuth follows your device when it’s set to light or dark. In the settings you can also choose to keep FairAuth always light or always dark.
Does FairAuth work with VoiceOver and large text?
Yes. VoiceOver reads each code digit by digit and tells you how many seconds it is still valid. Every screen adapts to the largest text sizes too.
Adding Accounts
How do I add an account?
- At the service (Google or Amazon, for example), open the security settings and choose two-factor authentication with an authenticator app. The service then shows you a QR code.
- In FairAuth, tap or click the plus button and scan the QR code.
- Enter the code FairAuth now shows at the service. That completes the setup.
Write down the backup codes many services offer while you’re there.
What ways are there to add an account?
- Scan QR Code: with the camera, the usual way
- Choose Screenshot or Photo: when the QR code is shown on the same device
- Paste Setup Link: when the service offers a link instead of a picture
- Enter Setup Key: the string of letters many services show below the QR code for typing in
- Mac only: Scan QR Code on Screen
The QR code is on the same iPhone. What now?
You have two options:
- Take a screenshot of the QR code and choose it in FairAuth under Choose Screenshot or Photo. Delete the screenshot afterwards: it contains the key to your account.
- If the service offers a setup link, tap it. It opens in FairAuth if you’ve chosen FairAuth under Settings > General > AutoFill & Passwords > Verification Codes.
How do I scan a QR code on the Mac?
Choose Scan QR Code on Screen and click the window that shows the code. FairAuth reads one single image in memory for this and keeps nothing. No screen recording permission is needed.
You can also drag a picture of the QR code into the FairAuth window.
What does FairAuth do with the camera?
Only read the QR code. FairAuth records nothing and saves no picture.
My setup key is reported as invalid. Why?
A setup key consists only of the letters A to Z and the digits 2 to 7. Common causes:
- a typo, such as a 0 instead of an O or a 1 instead of an I
- a key that wasn’t copied completely
Spaces, hyphens and lowercase letters, on the other hand, are no problem.
What are backup codes, and where should I keep them?
Many services give you a handful of backup codes when you set them up. Each one lets you sign in once, even without FairAuth. They’re your emergency exit if you lose your device.
They’re safest printed out at home, or digitally, for example as a note in the Passwords app. Not only in FairAuth: then they won’t help you if FairAuth itself is gone.
Why does FairAuth ask before adding an account from a link?
To protect you. A link on a website or in a message could slip in an account that isn’t yours, whose codes an attacker then uses. So only add the account if you’ve just started the setup at the service yourself.
Do my accounts get logos?
Yes. FairAuth comes with over 3,200 logos of well-known services and assigns them when you add an account. The search for them runs on your device, so no server learns which services you use.
Your own pictures for accounts are part of the full version after the trial.
Moving from Another App
Which apps can I move from?
FairAuth takes over your accounts directly from these apps:
- Google Authenticator
- Authy
- 2FAS
- Aegis
- Ente Auth
- Bitwarden and Bitwarden Authenticator
- Proton Authenticator
- LastPass Authenticator
- Apple Passwords
Plus lists of otpauth links, which many other apps export. In FairAuth you’ll find this under Move from Another App.
How do I move from Google Authenticator?
- In Google Authenticator, choose Transfer accounts > Export accounts and select the accounts.
- Google Authenticator shows one or more QR codes.
- Scan them one after another in FairAuth under Move from Another App.
The order doesn’t matter, and FairAuth shows how many codes are done. Instead of scanning, you can also choose screenshots of the QR codes.
How do I move from Authy?
Authy itself can’t export. But you can request your data from Twilio, the company behind Authy:
- FairAuth prepares the request as an email in English. You send it yourself.
- Twilio confirms by email and with a code by text message, and may take up to a month.
- FairAuth opens the file you receive with your Authy backup password.
Which password opens the Authy file?
Your Authy backup password. You’ll find it in Authy under Settings > Accounts > Backup Key.
Important: it must be the password that was set when Twilio created the file. A password changed later won’t open it. If you don’t remember it, set a new one in Authy before you request your data.
Why are some Authy accounts missing from the file?
Authy doesn’t back up the accounts listed under “Authy Accounts”. That’s why they never appear in Twilio’s file. Set these accounts up again at each service.
How do I move from 2FAS?
- In 2FAS, open the settings and then the backups.
- Export a file, with or without a password.
- Save the file in the Files app, or send it to your Mac with AirDrop.
- Choose it in FairAuth under Move from Another App.
How do I move from Aegis?
In Aegis, go to Settings > Import & Export and export in the Aegis format, ideally encrypted with a password. Then choose the file in FairAuth under Move from Another App.
A file that only Aegis’s own unlock method can open (such as a fingerprint) doesn’t work. In that case, export with a password.
How do I move from Ente Auth?
In Ente Auth, go to Settings > Data > Export codes, then choose the file in FairAuth under Move from Another App. The encrypted file works just as well as the plain text file.
How do I move from Bitwarden?
In Bitwarden, export as .json or as password protected .json, then choose the file in FairAuth under Move from Another App. In Bitwarden Authenticator you’ll find the export in the settings.
Files protected with Argon2id and files that only Bitwarden itself can open don’t work.
How do I move from Proton Authenticator or LastPass Authenticator?
- Proton Authenticator: use the export in the settings, with or without a password.
- LastPass Authenticator: choose Settings > Transfer accounts > Export to file. This file isn’t encrypted, so delete it after the import.
Then choose the file in FairAuth under Move from Another App.
Can I take over codes from Apple Passwords?
Yes, on the Mac:
- In the Passwords app, choose File > Export All Passwords to File.
- Choose the file in FairAuth under Move from Another App. FairAuth only takes the verification codes and reads no passwords.
- Delete the file afterwards: it contains all your passwords unencrypted.
My old app has no export. What now?
Then you set up each account again at the service, just like the first time. Under My App Has No Export, the Switching Assistant guides you step by step.
The Not Used Yet list shows you which accounts are still missing. Allow a few minutes per account; you can stop at any time and continue later.
What is the Not Used Yet list?
It helps you move. Every account you took over stays on it until you copy or fill in its code for the first time. That way you see which accounts already work in FairAuth.
Once the list is empty, you’ve used every account at least once, and you can delete the old app.
Is my export file uploaded anywhere?
No. FairAuth reads the file only on your device and shows you what it found before adding anything.
An export without a password contains your codes unprotected. So delete it after the import, from the trash too.
Why were some accounts skipped?
FairAuth tells you the reason for each skipped account, for example an algorithm or account type FairAuth doesn’t support, or a damaged key.
Set these accounts up again at the service, and keep them in the old app until then.
Should I delete my old app right away?
No, not yet. Keep it until you’ve signed in successfully with a few codes from FairAuth. The Not Used Yet list helps you with that. Only then delete the accounts in the old app, and the export file.
Backup and Devices
How does FairAuth back up my codes?
You have two ways and can use both:
- iCloud sync: your accounts are the same on all your Apple devices, and you restore a new device from it.
- Backup file: FairAuth saves an encrypted file to a folder you choose, also outside Apple.
Both are end-to-end encrypted: only you can read them.
Are my codes in the regular iPhone backup or in Time Machine?
No. Your codes are protected by a key that never leaves your device, and that key isn’t in those backups. That’s why FairAuth has its own backups: iCloud sync or a backup file. Set one of them up.
Where can I keep the backup file?
In any folder you choose, for example:
- on a USB stick
- on your NAS
- in Nextcloud, Proton Drive, Dropbox or iCloud Drive
The file is encrypted, so the provider of the folder can’t read it.
How often is the backup saved, and how many versions are kept?
FairAuth saves a new encrypted file a few seconds after every change and reads it back to check it, so there’s nothing to start by hand. The last five versions are kept; FairAuth removes older ones.
What is the backup password?
It protects your backup file. FairAuth suggests six random words: easy to write down and practically impossible for others to guess.
You can also choose your own password. It must be at least 10 characters long and hard to guess; FairAuth tells you if it’s too easy.
What if I forget the backup password?
Then nobody can open the backup file, not even us. There’s no way back.
So write the password down and keep it safe, for example with your backup codes. So you don’t write it down wrongly, FairAuth asks for two of its words during setup.
Can I change the backup password?
Yes, in the settings under Backup, with Change Backup Password. FairAuth then asks whether older backup files with the old password should be removed.
How do I check that my backup works?
With Test Restore in the settings under Backup. You enter your backup password, FairAuth opens the newest file and counts the accounts in it. Nothing about your accounts changes.
Do this now and then, so you know for sure that file and password belong together.
What are local snapshots?
Automatic copies on your device that help after a mistake, such as accounts deleted by accident. FairAuth makes one before every import, every permanent deletion and every restore, otherwise at most once an hour, and keeps the last 10.
Because they’re on the device, they don’t help if the device is lost or broken. That’s what iCloud sync and the backup file are for.
I deleted an account. Can I get it back?
Yes. Deleted accounts stay in Recently Deleted for 30 days, and you can restore them there. Only after that are they deleted for good.
What should I know before deleting an account for good?
First turn off two-factor authentication for this account at the service. Otherwise the service keeps asking for codes you no longer have, and you may not be able to get in. Deleting for good can’t be undone.
How do I restore from a backup file?
- Choose Restore from Backup, then From a Backup File.
- Choose the file. FairAuth backup files end in .fairauth.
- Enter your backup password.
FairAuth first shows you a preview and marks accounts that are already there, so nothing arrives twice.
How safe is iCloud sync?
Your codes are encrypted on your device before they go to iCloud. The key for this is in your iCloud Keychain, which Apple itself can’t read. So only your own devices can read your codes: not Apple, and not us.
Why does iCloud sync need the iCloud Keychain?
That’s where the key that encrypts your codes is kept. Without it, FairAuth uploads nothing, because nothing goes to the cloud unencrypted.
To turn it on: Settings > your name > iCloud > Passwords.
Is iCloud sync on from the start?
No. iCloud sync stays off until you turn it on yourself. You decide whether your codes go to the cloud.
What happens if I turn iCloud sync off?
Your codes stay on your device. When you turn it off, FairAuth asks whether the encrypted copy in iCloud should stay or be deleted.
Remember: without iCloud sync you need a backup file, otherwise your codes are gone if you lose the device.
How do I move to a new iPhone or Mac?
With iCloud sync:
- Sign in on the new device with the same Apple Account, install FairAuth and choose Restore from Backup > From iCloud.
With a backup file:
- Choose Restore from Backup > From a Backup File and enter your backup password.
Keep the old device until you’ve signed in with a few codes from the new one.
I lost my iPhone. What now?
First of all: your codes are safe. FairAuth only opens with Face ID, Touch ID or your device passcode.
How to get back to your accounts:
- With iCloud sync or a backup file: install FairAuth on the new device and restore from it.
- Without a backup: sign in with the backup codes of each service or use its account recovery, then set up two-factor authentication again.
Do my Mac and iPhone have the same accounts?
Yes, if you turn on iCloud sync: then your accounts are the same on all your devices. It also works without iCloud: the Mac opens a backup file from the iPhone and the other way round.
Is FairAuth available for the iPad?
Yes, FairAuth is the same app for iPhone and iPad. On the iPad it uses the space with a sidebar and a detail view, and supports keyboard shortcuts.
Codes
A code isn’t accepted. What can I do?
- Check your device’s time. Codes depend on the exact time; even one minute off makes them invalid. Turn on Set Automatically: on the iPhone under Settings > General > Date & Time, on the Mac under System Settings > General > Date & Time.
- If the line below the code is almost empty, wait for the next code.
- If neither helps, set up the authenticator app again at the service with a new QR code.
Which kinds of codes does FairAuth support?
- Time-based codes (TOTP): the standard, a new code every few seconds
- Counter-based codes (HOTP): a new code each time you ask for one
- Steam Guard
Technically, SHA-1, SHA-256 and SHA-512, 6 to 8 digits and 10 to 120 seconds are possible. Usual are SHA-1, 6 digits and 30 seconds. Only change these values if the service explicitly asks you to.
How do counter-based codes work?
They don’t change with time, but each time you ask for a new one. That’s why such accounts show Generate Code instead of a code. When you tap it, FairAuth creates the next code and copies it; New Code gets another one.
If the service stops accepting the codes, enter two or three new codes right after each other. Then it catches up again.
Can I hide the codes when others are watching?
Yes. Turn on Hide Codes Until Tapped in the settings (on the Mac: Hide Codes Until Clicked). Then a code only shows when you tap the account (on the Mac: click).
AutoFill and Browsers
How do I turn on AutoFill?
- iPhone and iPad: Settings > General > AutoFill & Passwords
- Mac: System Settings > General > AutoFill & Passwords
Turn on FairAuth there. From then on you get the right code suggested when you sign in, in Safari and in many apps, and don’t need to copy anything.
Why doesn’t Safari offer the code on a website?
Safari only offers a code on the website saved with that account in FairAuth. If the website is missing, FairAuth can’t fill anything in there.
How to fix it:
- Add the website to the account, or
- take over the suggested websites in the settings under Accounts Without a Website.
Where do the suggested websites come from?
From two sources: 2fa.directory, a public list of the official websites of many services, and the names of your accounts. The list is built into the app; FairAuth downloads nothing. Only what you take over is saved.
What does iOS get for AutoFill?
Only the website and the name of accounts that have a website. The system never gets codes or setup keys. This information stays on your device.
Does AutoFill work with every code?
With time-based codes, so almost all of them. Counter-based codes you copy in the app. Before filling in, FairAuth asks for Face ID, Touch ID or your passcode, so nobody else can use your codes.
Can I use FairAuth in Firefox or Chrome on the Mac?
Yes, with FairAuth 1.3 or later for Mac:
- Install the extension for Firefox or Chrome. FairAuth connects by itself.
- On the page that opens next, allow all websites. The FairAuth button then appears in every code field.
- On the sign-in page, click the FairAuth button or the FairAuth icon, or press ⌃⇧F.
After Touch ID or your login password, the code is in the field. This works on the websites saved with your accounts. If one is missing, click “Assign in FairAuth” in the extension and choose the account.
Do I need an extension for Safari?
No. Safari uses the system’s AutoFill; turning on FairAuth in the settings is all it takes.
Can the browser extension read my websites?
It doesn’t read along and has no internet access. After installation it has no access to websites. If you allow all websites, it only looks for code fields there to put the FairAuth button in. Your browser manages that permission, and you can take it back at any time.
The code goes straight into the field and never to the clipboard, and nothing is filled in without Touch ID or your login password.
Security and Privacy
How are my codes protected?
Your codes are stored encrypted on your device (AES-256). The key is protected by the Secure Enclave, a sealed-off security area in your device’s chip. It can only be used after Face ID, Touch ID or your device passcode.
FairAuth never sees your biometric data; the system checks it.
What does FairAuth know about me?
Nothing. There’s no account, no analytics, no tracking and no advertising. Your accounts only leave your device if you use iCloud sync or a backup file, then encrypted, or if you export them yourself.
The only exception: if you allow sharing analytics with app developers in the system settings, Apple may pass anonymous crash reports on to us.
Which servers does FairAuth connect to?
Only Apple’s: iCloud if you turn on sync, and the App Store for purchases. FairAuth has no servers of its own.
On the Mac, FairAuth doesn’t even have permission to open network connections of its own.
Can my codes be seen in the app switcher or in screen recordings?
No.
- In the app switcher, FairAuth always covers the codes.
- During screen recording or screen sharing, FairAuth hides the codes.
- On the Mac, FairAuth’s windows don’t appear in screenshots, recordings or screen sharing at all.
When does FairAuth lock?
After you switch to another app, depending on the setting: immediately or after 30 seconds, 1 minute or 5 minutes. When you lock your device, FairAuth locks too.
On the Mac, FairAuth also locks right away on sleep, when the screen is locked and on switching users.
Can you send me a code or restore my accounts?
No, we can’t. Your codes exist only on your devices and in your backups; we never see them.
So never send anyone your setup keys, QR codes, backups or backup codes. We never ask for them. Whoever asks is after your accounts.
Price and Openness
What does FairAuth cost?
You can use everything for free for the first 7 days. After that, the full version is a one-time purchase; the App Store shows the price for your country.
There’s no subscription, and nothing is charged automatically after the trial. Some features stay free for good, even without buying.
What stays free without buying?
Everything you need to reach your codes and take them with you at any time:
- showing and copying codes
- backup file and iCloud sync
- export in the open format
- restoring from any backup
What needs the full version after the 7 days?
- adding new accounts, also by import
- your own pictures for accounts
- AutoFill, also in Firefox
- shortcuts and widgets
Do I have to buy FairAuth separately for Mac and iPhone?
No. One purchase covers iPhone, iPad and Mac as long as you use the same Apple Account. After reinstalling, tap Restore Purchases and the full version is back.
My purchase is waiting for approval. What does that mean?
Someone else has to approve the purchase first, for example a parent through Ask to Buy. As soon as that happens, FairAuth unlocks the full version.
Can I take my accounts elsewhere at any time?
Yes, free and at any time, under Export Your Accounts. You have three options:
- an encrypted backup file
- a list of setup links (otpauth), which many authenticator apps read
- a complete list in JSON format
You get the two unprotected lists only after Face ID and with a warning, so they don’t end up in the wrong hands by accident.
Can I open my backup without FairAuth?
Yes. We’ve published how a backup file is built, in English and German. It can be opened with free tools; it uses Argon2id and XChaCha20-Poly1305 from the libsodium library. Backup files end in .fairauth.
What happens to my codes if FairAuth stops existing?
Your codes keep working. They’re on your devices, not with us, and the app needs no server of ours.
You can also export your accounts at any time, and because the backup file format is published, it can be opened even without FairAuth.
Who makes FairAuth?
BYTEPOTATO UG (haftungsbeschränkt) from Göttingen, Germany. The full details are in the imprint.
How can I reach you?
Write to contact@bytepotato.com. In the app you can also use About FairAuth > Write to Us.