Hottub Auth

Hottub Auth is a private authenticator for one-time codes, encrypted recovery, and Hottub sign-in approvals. It keeps security focused: codes when you need them, backup when you choose it, and approvals only when you connect a Hottub account. The core authenticator works signed out and offline after accounts are added. A Hottub account is optional and is used for Hottub sign-in approvals, paired-device status, and encrypted recovery features. ADD AUTHENTICATOR CODES Set up two-factor authentication for any website or app that supports authenticator apps. Add accounts by scanning a standard QR code, importing Google Authenticator export QR screenshots, or entering a setup key manually. Hottub Auth supports standard time-based one-time password codes, so it fits into the security flow you already use for email, banking, social, work, hosting, and admin accounts. IMPORT FROM GOOGLE AUTHENTICATOR Moving to a new authenticator should not mean retyping every setup key. Hottub Auth can read Google Authenticator export QR codes from the camera or from screenshots you select from your photo library. Large Google exports can span multiple QR codes; Hottub Auth lets you scan or select multiple export screenshots, reviews the decoded accounts on-device, removes duplicates, and imports only after you confirm. STAY ORGANIZED Security codes are easier to trust when the list is clear. Search by account, issuer, or group. Favorite important accounts so they stay near the top. Use readable countdowns to know when a code is about to rotate, and tap to copy a code when you need it. ENCRYPTED ON THIS DEVICE Your authenticator setup keys live in an encrypted local vault. If you enable the app lock, opening the vault requires Face ID, Touch ID, or your device passcode. The vault remains encrypted regardless of whether the app lock is on, and the app hides sensitive screens when it moves to the background. BACKUP AND RECOVERY Authenticator data is important. Hottub Auth includes encrypted backup and restore so you can move codes to another iPhone without exposing setup keys in plain text. The backup is locked with a passphrase only you know. Hottub cannot open an encrypted backup for you, so the app is explicit about keeping your passphrase safe. HOTTUB SIGN-IN APPROVALS When you connect a Hottub account, Hottub Auth can approve Hottub sign-in requests from the app. Approval requests show the requesting browser or device and a matching code so you can compare what appears on the web with what appears in the app. Notifications can bring you back into Hottub Auth quickly, while biometric or passcode checks keep the final approval step inside the app when your app lock is enabled. APPLE WATCH COMPANION The Apple Watch companion is built for Hottub approvals and signed-in status. Authenticator setup keys, recovery, and sensitive vault actions stay on iPhone. BUILT FOR PRIVACY Hottub Auth is local-first. You can use the authenticator without creating an account, without syncing codes, and without uploading setup keys. If you choose encrypted backup or Hottub account features, the app keeps those actions separate from the core offline code generator. WHAT YOU GET - TOTP authenticator codes for websites and apps that support authenticator apps. - QR scanner, Google Authenticator import, screenshot import, and manual setup-key entry. - Search, favorites, grouping, countdowns, and tap-to-copy for fast code access. - Encrypted on-device vault with optional Face ID, Touch ID, or passcode lock. - Encrypted backup and restore between iPhones. - Advanced plain-text export and import with clear warnings. - Optional Hottub sign-in approvals with matching-code confirmation. - Apple Watch companion for approval visibility. - Local-first design: the core authenticator works signed out. Hottub Auth is for anyone who wants an authenticator app that feels calm, organized, and serious about recovery.