Guides, step by step

Two-factor authentication adds a second step when you sign in: after your password, the site asks for a six-digit code that changes every 30 seconds and that only your device can make. Someone who steals your password still cannot get in.

1. In the account's security settings, choose to turn on two-step verification with an authenticator app.
2. When the site shows a QR code, open Keyrook Authenticator from the toolbar and choose Scan the QR code on this page. It reads that one tab, and only when you ask.
3. Type the code it shows into the site to finish. Keep the site's backup codes somewhere safe.

1. In Google Authenticator on your phone, open the menu and choose Transfer accounts, then Export accounts.
2. In Keyrook Authenticator, choose Scan with your camera and hold the phone up to the webcam. Or take screenshots of the codes and upload them, several at once.
3. Your accounts appear, making the same codes as your phone. Keep both if you like.

Coming from another app? Import its export file, even a password-protected one. A password manager's CSV works too: only the column with the codes is read, and the passwords in the file are never kept.

• A QR code on the page: open the extension and choose to scan the QR code on this page.
• A QR code elsewhere: point your camera at it, or upload a picture of it.
• A setup key: paste it in.
• Just one code, once: paste a key and see its code, without saving anything.

1. On the site's code step, click Keyrook Authenticator in the toolbar. The account for that site comes first.
2. Press Fill to put the code into the page, or copy it with one click.

Alt+Shift+F fills the code for the page without opening anything, wherever exactly one account belongs to the site.

1. In Keyrook Authenticator, sign in with Google, GitHub or an email address.
2. On your next computer, install it and sign in the same way.
3. Approve the new browser from one already signed in, once you have checked that both show the same code — or use your recovery key.

Everything is encrypted on your device before it is uploaded, with a key the server never receives. Its settings list every signed-in browser, and sign any of them out.

• Make an encrypted backup to a file, of every account or the ones you pick, and restore it anywhere.
• Print the setup codes of every account on one sheet, to keep somewhere safe.
• With a master password, keep the recovery key sheet: it is the way back if the password is forgotten, and nobody else can reset it.

Codes are worked out from the current time, so a computer whose clock is a minute off makes codes that sites refuse. Set your computer's date and time to update automatically, and try the next code.

Passhold is free, on the Chrome Web Store and Edge Add-ons, for Chrome and Microsoft Edge on your computer.

1. Add Passhold from the Chrome Web Store or Edge Add-ons, and pin it to the toolbar.
2. Click Passhold, and sign in or create your Keyrook account: with Google, with GitHub, or with Use an email address, which sends you a six-digit code.
3. A new account comes with a recovery key. Keep it somewhere safe, apart from your email: Passhold asks you to type two of its groups back.
4. Last, choose how Passhold opens on this computer: Touch ID or Windows Hello where it has one, and Passhold offers the other ways where it does not.

On your next computer, add Passhold and sign in with the same account. Signed in with Google or GitHub, confirm with your passkey, or check that both computers show the same code. Your logins come down.

1. Export your passwords from your browser or password manager: as a CSV file from Chrome, Edge, Firefox, Safari, Apple Passwords, 1Password, LastPass, KeePass, Dashlane, Proton Pass or NordPass — from Bitwarden, as JSON (not encrypted), which keeps its cards and passkeys too.
2. In Passhold's settings, open Backup & import, and under Import choose the file. Passhold says what it found — logins, cards, addresses, notes — and which are already in your vault.
3. Delete the file afterwards: it holds your passwords in plain text.

1. In Passhold's settings, open Backup & import and choose Download backup. Passhold asks you to prove it is you first: your password, your fingerprint or your security key.
2. Move the file somewhere other than this computer. It is sealed, so a cloud drive is fine.
3. To restore, choose Restore from a backup, then the file, and the password — or the recovery key — it was made with. What it holds is added; nothing is removed.

Signed in, your Keyrook account already brings your logins back on a new computer. A backup is a copy you keep yourself, as well.