Thiravoo is a calm, private home for your authenticator codes. Add the
accounts you protect with two-factor authentication, get fresh six-digit
verification codes every 30 seconds, and share access with the colleagues who
need it — without ever handing over the setup key.

YOUR DIGITAL KEYS, IN ONE PLACE
• Scan a service's authenticator QR code with the camera, import a QR image,
or type the setup key by hand.
• Standard TOTP codes (SHA-1, 6 digits, 30 seconds) work with Google,
Microsoft, GitHub, Facebook, Amazon, Notion, Figma and most other services.
• Codes refresh automatically; copy one with a single tap.
• Hide codes while you share your screen.

SHARE ACCESS, NOT SECRETS
• Give a colleague access to an account's codes by adding their email.
• They sign in with their own verified account and only ever see codes —
never the setup key.
• Revoke access at any time. Only the account owner can manage who has it.
• The activity log shows who added, copied or shared what, and when.

BUILT AROUND YOUR TRUST
• Setup keys are encrypted at rest on the server with AES-256-GCM.
• Every code request checks the signed-in person's access.
• Sign-in is handled by Firebase Authentication with email verification.
• QR decoding happens on your device; no third-party decoding service is used.

ONE VAULT, EVERYWHERE
Use the same account in the Thiravoo web app and desktop app for macOS,
Windows and Linux.

Thiravoo stores authenticator setup keys that generate TOTP codes. It does not
import email or SMS codes from other services, and removing an account in
Thiravoo does not turn off two-factor authentication on the original platform —
keep that platform's recovery codes somewhere safe.

Privacy policy: https://thiravoo.com/privacy
Terms of use: https://thiravoo.com/terms