Terms & Conditions

Welcome to TOTP Authenticator. By creating an account or using this website ("the Service"), you agree to the following Terms & Conditions. Please read them carefully. If you do not agree with any part of these terms, do not use the Service.

1. The Service

The Service provides a web-based authenticator: you may store the secret keys for your two-factor authentication accounts and generate time-based one-time passwords (TOTP) compliant with RFC 6238. The Service is provided by Pabel Islam (P9X9).

2. Account responsibilities

• You are responsible for keeping your password confidential and for all activity under your account.
• You must provide accurate information (a valid email address and a unique username) when registering.
• You are responsible for maintaining secure backup copies of your TOTP secret keys. We cannot recover a secret that you delete from your account.
• One account per person. Duplicate accounts may be removed without notice.

3. Acceptable use

You agree not to:

• Use the Service for any unlawful purpose or to violate any law.
• Attempt to access another user's account or data.
• Attempt to disrupt, overload or probe the infrastructure (including automated brute-force attempts, scraping or denial-of-service attacks).
• Upload or store secrets you are not authorised to use, or any malicious content.
• Reverse engineer, decompile or attempt to extract the Service's source code.

4. Security expectations

We store your TOTP secrets encrypted and never expose them without re-authentication. However, the security of two-factor authentication depends on your own practices:

• Use a strong, unique password for this Service and your email account.
• Never share your TOTP secrets or verification codes with anyone.
• Never enter your secrets on websites you do not trust.
• Keep backup copies of your secrets in a safe place (for example, printed and stored securely) in case you lose access to your account.

5. Availability and reliability

We aim to keep the Service available at all times but do not guarantee uninterrupted availability. The Service may be suspended for maintenance, security or technical reasons. The Service is provided "as is" and "as available".

TOTP codes are generated client-clock-synced against your device time. If your device clock is significantly wrong, generated codes may not match the codes accepted by your other services. We are not responsible for access failures caused by incorrect device clocks.

6. Termination

You may stop using the Service at any time and delete your authenticator accounts from the dashboard. We may suspend or terminate accounts that violate these terms, and we may discontinue the Service with reasonable notice. Upon termination, your data will be deleted in accordance with our Privacy Policy.

7. Limitation of liability

To the maximum extent permitted by law, P9X9 and Pabel Islam shall not be liable for any indirect, incidental, special, consequential or punitive damages, or any loss of profits or data, arising out of your use of or inability to use the Service. In particular, we are not liable for account lockouts, failed logins or lost access to third-party services that result from loss of your TOTP secrets or verification codes.

8. Changes to the Service and terms

We may update the Service and these terms from time to time. Updated terms take effect when posted on this page. Continued use of the Service after changes constitutes acceptance of the updated terms.

9. Governing law

These terms are governed by the laws of the jurisdiction in which the operator is established. Any disputes shall be resolved through the competent courts of that jurisdiction.

10. Contact

Questions about these terms? Contact Pabel Islam at pabelprfb@gmail.com.