2FA Backup Codes Vault

Your 2FA backup codes, encrypted, never in plaintext

2FA backup codes are a permanent bypass for two-factor authentication, which makes storing them in a plaintext notes app or screenshot a serious risk. This vault uses window.crypto.subtle to derive an AES-256 key from your passphrase via PBKDF2 (210,000 iterations) and encrypts every entry with AES-GCM before it ever touches localStorage. Add, view, delete, and export/import an encrypted backup — all without your passphrase or plaintext codes ever leaving memory.

• →Derives a 256-bit AES key from your passphrase using PBKDF2 with 210,000 iterations and a random salt
• →Encrypts every entry with AES-GCM using a fresh random IV on every save — only ciphertext is ever stored
• →Wrong passphrase fails gracefully with a clear error instead of corrupting or silently returning garbage data
• →Export an encrypted backup file and import it back on any device — still requires the original passphrase to unlock
• →Watermarked by Cikal Studio Labs · Works on any device, no install required