For dev teams

On-call shouldn't depend on whose phone has the AWS root code.

Root and admin accounts on AWS, GitHub, Apple, Google Play, your registrar and Cloudflare are shared by design, but their 2FA usually isn't. Fox Auth lets the whole rotation get those codes without passing a phone around or pasting seeds into Slack.

14-day free trial. Web, Mac app, and Chrome extension on every plan.

Scout the fox keeping 2FA codes in a safe, separate from passwords

Sound familiar?

The 2FA problems dev teams run into, and how Fox Auth fixes them.

The 3 a.m. incident needs the AWS root code, and it's on someone else's phone.

Everyone on the team gets the code from the web, Mac menu bar, or Chrome. No more waking up the person who set it up.

Setup QR codes get screenshotted into Slack.

Paste the screenshot into Fox Auth instead. The secret is encrypted on our servers, and teammates only get the current code.

An engineer leaves with seeds in their personal authenticator.

With Fox Auth, engineers never hold the seed. Remove them and access ends straight away, with nothing to rotate.

An auditor asks who accessed production admin accounts.

The audit log shows every reveal, copy, and autofill, by person and app, with up to a year of history on Scale.

What goes in the vault

The accounts dev teams share most.

If it shows a 2FA setup QR code or a setup key, Fox Auth can hold it. These are some of the most common.

AWS rootGoogle CloudGitHub org ownerApple DeveloperGoogle Play ConsoleCloudflareDomain registrarnpmDocker HubDatadogVercelStripe

How it works

Add it once. Share it. Everyone's in.

  1. 1

    Add your codes

    Paste a setup QR screenshot, scan it with your camera, type the key, or import from Google Authenticator.

  2. 2

    Invite your team

    Send each person a one-time invite link. Choose which codes are for the team and which are Only me.

  3. 3

    Log in anywhere

    Get codes on the web, from the Mac menu bar, or autofilled in Chrome. Every use is logged.

Questions from dev teams

Is there an API or CLI for CI pipelines?

Not yet. It's on our roadmap. Today Fox Auth is built for people: the web vault, Mac app, and Chrome extension. Tell us what you'd automate.

Does Fox Auth support SSO?

SAML SSO and SCIM are on the roadmap. Today people sign in with Google or an email link or code, and owners and admins use their own second factor by default.

Can I keep my personal GitHub 2FA in the same app?

Yes. Set it to Only me and nobody else on the team sees it.

Why not just keep TOTP in our password manager?

You can, but then anyone with the vault item usually holds the seed too, and has to be re-enrolled when they leave. Fox Auth keeps 2FA separate from passwords and only hands out codes.

Scout the fox holding a shield with a green checkmark

Ready to outfox your 2FA mess?

Get your whole team set up in an afternoon. Free for 14 days, cancel anytime.

Start free trial