End-to-end encrypted. Free with your Smile account.

Your 2FA codes and passwords, locked with a key only you hold.

Smile Auth is an authenticator and a password manager in one. It syncs to every device you use, keeps everything encrypted before it leaves your hands, and never locks you in.

Open your vault Get the apps

What you get

Everything people asked other apps for

We read what people actually say about their authenticator apps - the lost codes, the exports that don't exist, the backups that aren't encrypted - and built the fixes in.

Synced everywhere

Web, Chrome extension and the Smile app, live. Change a phone and your codes are still there.

Scan, or upload a screenshot

Point your camera at the QR code - or just upload or paste a screenshot of it. No need to aim your phone at your own screen.

No lock-in, ever

Import from Google Authenticator, Aegis, 2FAS, Ente, Proton, Bitwarden, 1Password, LastPass and more. Export any time, in open formats.

Groups

Sort codes and passwords into groups with their own colours - Work, Family, Games - and filter by them in a tap.

Sub users

Share a group with family or your team - view only or editable - and take it back any time. Keys are rotated when you do.

A password manager too

Logins, notes and cards, a generator, reused and weak password checks, and a private breach check.

Your layout

Hide the sections you don't use, blur codes while screen sharing, compact view, drag to arrange, next-code preview.

Two ways back in

A Recovery Kit you keep, and - if you lose that too - Smile founders can restore your access after checking it's really you.

Backups that are encrypted

Download a password-protected backup whenever you like. Unencrypted exports are there too, clearly marked, for moving apps.

Security

Smile can't read your vault

Your vault is encrypted on your device before anything is sent. Our servers only ever store the locked copy.

Your vault password stays with you

It's stretched with Argon2id (64 MB, 3 passes) on your device and never sent anywhere. Your Smile password signs you in; it can't open your vault.

Everything is sealed with AES-256

Every code, password, note, card, group name and setting is sealed with its own key using AES-256-GCM, so tampering is detected too.

Sharing uses public keys

Groups you share are sealed to each person's own key (RSA-OAEP 3072). You check a six-word security code together so nobody can slip in.

Every sign-in uses your Smile account (with its two-step check if you've turned it on). Wrong vault passwords lock the vault for longer each time. Your security activity shows every sign-in and anything Smile staff did - staff can wipe a vault if you ask, but nobody at Smile can read one.

Ready when you are

Open your vault Get the apps