Help Center
EverCode 2FA Help & Recovery Guide
Learn how to add 2FA accounts, use Chrome autofill, sync approved devices and recover your EverCode vault offline.
Frequently Asked Questions
Direct, factual answers regarding EverCode's security, technology, and usage.
How does EverCode guarantee zero-knowledge security?
EverCode uses a zero-knowledge cryptographic architecture implemented in Rust. Your master password derives an Account Recovery Key (ARK) locally via Argon2id; codes are encrypted with XChaCha20-Poly1305 before optional sync, and the server receives only opaque ciphertext.
Can I use EverCode completely offline without creating an account?
Yes. Local mode lets you generate, store, organize, import, and export TOTP and HOTP codes offline without an account or network connection.
How does the Chrome extension work?
The official Manifest V3 Chrome extension uses an embedded WebAssembly cryptographic core for instant autofill, search, and encrypted synchronization with your approved devices.
How does Family sharing keep personal accounts private?
Each member has an independent private vault. Shared vaults use dedicated X25519 key envelopes. When a member leaves, future shared-vault access is blocked; codes already viewed may remain copied.
What happens if I lose my device or forget my password?
You can restore your vault on a replacement device with your master password or printed Emergency Recovery Kit. Because EverCode is zero-knowledge, support cannot reconstruct a forgotten password or recover lost keys.
What happens if I lose my device or forget my password?
An Approved Device Remains Available
Use your active device to approve the new device or view your vault, then revoke the lost device from your settings.
Only the Emergency Recovery Kit Remains
Install EverCode on your new device and follow the recovery instructions using your kit. EverCode support will never ask for your recovery phrase.
No Device and No Recovery Kit
Because EverCode is zero-knowledge, support cannot recover your vault. You must use backup codes provided by each individual service.