2FA.GLOBAL / PRIVACY
Privacy
How 2FA.global handles secrets, codes and website requests.
Your secret and codes
Generation uses the browser Web Crypto API on this device. The application does not send secrets or codes to a server and does not persist them in cookies, localStorage or IndexedDB. Clearing the form, refreshing or leaving the page removes the active secret from this page. This is not a guarantee of forensic memory erasure.
Hosting and requests
Cloudflare delivers the website and may process ordinary request metadata such as IP addresses, browser information, paths and timestamps for delivery and security. We do not add advertising scripts or application request logging. Button actions send a fixed action name and a known page path to our server, which adds the time and forwards the notification to the operator’s Feishu group. Feishu stores these messages under the operator’s group settings. No secrets, codes, clipboard content, query strings, IP addresses, browser identifiers or visitor IDs are included in these messages. Cloudflare uses request IP addresses only for notification rate limiting and normal delivery/security. Notifications may be lost when offline, blocked or rate limited; code generation is unaffected. Do not place secrets in URLs or query parameters.
Clipboard and your device
The Copy code button writes a code to your system clipboard only after you click it. Copy link copies only the public website address, without your secret or code. Clipboard history, extensions, screenshots and other software on your device are outside this site’s control. The site reads the clipboard only when you click Paste & generate, and processes its content locally in this page.
No account or vault
No registration is required. This tool does not store accounts, offer backup, recover secrets or sync data between devices. Closing the page means you will need the original setup secret again.