Migrate from Authy to TwoFac

Why is this manual?

Exporting 2FA secrets from Authy is notoriously difficult because the app does not provide a native export feature. Since the Authy Desktop app was discontinued in 2024, older community workarounds no longer function, making the manual method the only reliable and official way to migrate.

Step 1: The Manual Method (Safest & Recommended)

This is the only official way to ensure you don't lose access to your accounts. It is tedious but guarantees your new app will work securely.

1. Log in to each service (e.g., Google, GitHub, Amazon) using your current Authy code.
2. Go to the Security/2FA settings of that account.
3. Disable 2FA temporarily.
4. Re-enable 2FA, which will show you a new QR code.
5. Scan this new QR code using the TwoFac app.
6. Test the new code to make sure TwoFac is correctly registered.

Warning: Some services (like Twitch or Gemini) historically used "Authy-only" tokens (7-digit codes) that cannot be exported to other apps. For these, you must disable 2FA on the site and switch to standard "Authenticator App" (TOTP) method before migrating to TwoFac.

Step 2: Verify Your New Setup

Don't Delete Authy Yet: Do not delete your Authy account until you have verified that every single token works in TwoFac and that you haven't missed any essential services.

• Enable Biometric Lock in TwoFac to ensure only you can access your codes.
• Create an Encrypted Backup of your accounts to never repeat this tedious process again! Store the backup securely.

Advanced: Using an Export Script (Technical)

If you have dozens of accounts, community-developed tools exist that register as a "new device" on your Authy account to pull the data. Use these at your own risk.

• Authy-GDPR-Export-Decryption: Scripts that use Authy's GDPR data export to decrypt your tokens.
• authy-export (Go library): This tool attempts to enroll itself as a new device on your account to fetch the TOTP seeds.
• Rooted Android: If you have a rooted Android phone, you can extract the secrets directly from Authy's local storage by using Aegis or 2FAS (and then exporting it to TwoFac).