How Fox Auth works

Create your team

1. Go to app.foxauth.com and sign in with Google, or with your work email (we send a link and a 6-digit code).
2. Name your team. You become its owner.
3. Choose a plan and start your 14-day free trial. You won't be charged until the trial ends, and you can cancel any time before then.
4. If your team requires it, set up an authenticator app as your own second factor. Fox Auth asks owners and admins for this by default.

Invite teammates

Open Members and choose Invite member or Invite admin, then Copy link and send it to one person. Each link works once and expires after 7 days. You can Revoke an unused link at any time.

Your plan sets how many people can join: Starter 3, Team 10, Business 50, Scale 150.

Roles and permissions

• Owner: one per team. Manages billing, settings, and members, and can export or delete the team. Hand the role to someone else with Make owner in Members.
• Admin: manages members and invites, and can edit or delete any code shared with the team.
• Member: uses the codes shared with the team, and adds and manages their own. Members only ever see the current 6-digit code, never the secret key behind it.

Under Settings → General the owner can choose whether owners and admins, or everyone, must use a second factor to sign in.

Add a 2FA code

When a site shows you its "set up two-factor" QR code:

1. Click Add token in the vault.
2. Paste a screenshot of the QR code (Cmd/Ctrl+V works anywhere on the page), drop an image, scan it with your Camera, or choose Paste key for the setup key or an otpauth:// link.
3. Check the Service name and Website (the extension uses the website to match codes to the page you're on), choose who can use it, and save.
4. If you're turning on 2FA right now, type the code from the confirm screen into the site to finish setup.

The Chrome extension and Mac app can also scan a QR code that's on your screen. See below.

Team or Only me

Every code is either shared with the whole team or visible to Only me. Use Only me for personal accounts that live in the same vault. To change it later, open the code's menu (…) and choose Share with team or Make Only me.

Only me codes are never shown to anyone else, are never included in someone else's export, and are deleted if you leave the team.

Reveal and copy a code

Codes stay masked until you click one. Click to reveal, then copy. Each reveal is recorded in the audit log. Star the codes you use most and they'll show under Favorites.

To protect shared accounts, each person can reveal up to 10 codes per minute. If you see "Too many codes in a minute", wait a moment and try again.

Import from Google Authenticator

In Google Authenticator, open the menu, choose Transfer accounts → Export accounts, pick the accounts, then scan or screenshot each QR code it shows into Add token. Fox Auth shows your progress ("2 of 3 scanned"). Imported accounts start as Only me, so nothing personal gets shared by accident.

For the full walkthrough on iPhone and Android, read Migrate from Google Authenticator.

Chrome extension

Connect it

Install Fox Auth from the Chrome Web Store, click the fox in your toolbar, and choose Sign in with FoxAuth. A Fox Auth tab opens. Click Connect extension. Owners and admins confirm once with their authenticator code.

Autofill

On a sign-in page that asks for a 2FA code, click the fox and pick the code. Fox Auth fills the box for you. If a page hides its code box inside a frame or uses unusual fields, Fox Auth copies the code instead, so just paste it. Autofill doesn't run on Chrome's own pages, such as settings or the Web Store.

The right code for the right site

Codes match by website. If a code doesn't appear for the site you're on, edit it in the web app (… → Edit details) and set its Website, for example google.com. If several codes match, pick one and Fox Auth remembers it for that site.

Scan a QR code on the page

Click the fox, then +. Fox Auth reads the QR code on the page. If it can't find one, drag a box around it. A confirm tab opens so you can save it.

Mac app

Fox Auth for Mac lives in your menu bar (macOS 14 or later). Press ⌃⌥⌘F from anywhere, type to filter, and press Return to copy the selected code.

• Sign in: choose Sign in with FoxAuth, then click Connect Mac app in the browser tab that opens. You can also sign in with an emailed code.
• Scan QR on screen: click + to find setup QR codes anywhere on your displays. The first time, macOS asks for Screen Recording permission (System Settings → Privacy & Security). Allow it, then quit and reopen Fox Auth.
• Clipboard: copied codes are marked so clipboard managers skip them, and they're cleared after 60 seconds.

Reveals from the Mac app show as Mac app in the audit log.

Audit log

Open Audit log to see who did what, and when. Fox Auth records reveals, copies, and autofills (and which app they came from), plus codes added, edited, or deleted, members joining, leaving, or removed, role and ownership changes, invites, exports, plan changes, and settings changes.

How long entries are kept depends on your plan: Starter 7 days, Team 30 days, Business 90 days, Scale 1 year.

Export and backups

Your codes are yours. Owners can go to Settings → Export secrets, confirm with an authenticator code, and choose Download CSV (one otpauth:// link per code) or Print QR sheet. Exports include team codes and your own Only me codes, never anyone else's. Every export is recorded in the audit log.

Security model

• Secret keys stay on our servers, encrypted with AES-256-GCM. The encryption key is held separately from the database that stores the encrypted data.
• Codes, not secrets: the web app, extension, and Mac app only ever receive the current 6-digit code. A teammate can't copy the key and take it with them.
• Second factor for admins: by default, owners and admins sign in with their own authenticator. Exporting and deleting a team always need it.
• Rate limits and audit: 10 reveals per person per minute, and every reveal is logged.
• Encrypted in transit: HTTPS everywhere, with HSTS.

Questions from your security team? Email hello@foxauth.com.

Plans and billing

Every plan includes the web vault, the Chrome extension, the Mac app, the audit log, and export. Plans differ by number of people, shared codes, and audit history. See Pricing.

• Trial: 14 days free on any plan. Cancel before it ends and you won't be charged.
• Change plan, card, or invoices: Settings → Billing, then Manage plan or Invoices & card. Payments are handled by Stripe.
• Yearly: pay for 10 months, get 12.
• If a plan lapses: codes can't be revealed or added until you pick a plan again, but the owner can always export or delete the team.

Offboarding and leaving

When someone leaves your company, an owner or admin removes them in Members. They lose access to every shared code straight away. Because they never had the secret keys, there's nothing to rotate. Their Only me codes are deleted.

To leave a team yourself, go to Settings → Danger zone → Leave team. Owners need to Make owner someone else first. To sign out on every device, use Settings → Your account → Sign out everywhere.