Stop reaching for your phone every time a site asks for a code. 2FA Codes shows your two-factor sign-in codes right on your watch, with a countdown to the next one. Codes are worked out on the watch itself from the current time, exactly like an authenticator app on your phone. No connection is needed once your accounts are set up. WHAT IT SUPPORTS • Time-based codes (TOTP), the kind most sites use • Counter-based codes (HOTP): press START for the next code • Steam Guard codes • SHA-1, SHA-256 and SHA-512, 6 or 8 digits, any period (30 s, 60 s...) • Up to 20 settings fields. One field can hold several accounts: paste a list of otpauth:// links, or a whole Google Authenticator export ON THE WATCH • One account per screen: service, account name and the code in large digits • A bar and a seconds counter show when the code changes. Both turn red in the last 5 seconds • UP / DOWN, or swipe, to go through your accounts • Optional PIN lock with an on-screen keypad. Tap the keys, or use UP / DOWN and START on watches without a touchscreen • With a PIN, your accounts are encrypted on the watch, with a key made from the PIN • After 5 wrong PINs the keypad locks for 30 seconds • Hold UP (MENU) to delete the account on screen ADDING ACCOUNTS Open Garmin Connect on your phone → your watch → Activities & Apps → 2FA Codes → Settings. Paste one of these into an Account field: • An otpauth:// link: the text inside a setup QR code. Most authenticator apps can export these (Aegis, 2FAS, Ente Auth, FreeOTP+, Proton Pass, Bitwarden...) • A Google Authenticator export link (otpauth-migration://...), with all its accounts • A Bitwarden Steam entry (steam://...) • Name:SECRET, for example GitHub:JBSWY3DPEHPK3PXP. Use the "can't scan the code?" text that sites show next to their QR code Set a PIN (4 to 8 digits) in the same settings screen to lock the app. After you first unlock with it, the watch moves your accounts into encrypted storage and empties the settings fields. To add more accounts later, paste them into any empty field: they are moved in the next time you unlock. To change the PIN, type the new one in the PIN field and unlock with the old one. Type off to remove the lock and get the accounts back in the settings fields. Forgot the PIN? Turn on "Forgot the PIN" in settings and open the app: it deletes the accounts stored on the watch, and you can add them again. GOOD TO KNOW • Codes depend on the watch's clock. It sets itself from your phone and GPS. If codes are rejected, sync the watch with Garmin Connect. • Keep your accounts in your phone authenticator too. The watch is a convenient second copy, not a backup. • Apps installed by copying the file to the watch by USB can't be set up from Garmin Connect. PRIVACY AND SECURITY 2FA Codes makes no network connections, and has no accounts, analytics or advertising. • Without a PIN, your secrets are stored on the watch as ordinary app settings, unencrypted. • With a PIN, they are encrypted on the watch (PBKDF2-HMAC-SHA256 key from the PIN, HMAC-SHA256 stream cipher with an integrity check). A 4 to 8 digit PIN can be guessed by someone who copies the watch's files and tries every PIN on a computer, so treat this as protection against casual access, not as strong encryption. A longer PIN helps. • Secrets you type into Garmin Connect travel from your phone to your watch as app settings and may be stored by Garmin. The watch empties the fields after moving them into encrypted storage, but Garmin may keep earlier copies. This is an independent app. It is not affiliated with or endorsed by Garmin, Valve (Steam) or Google.

First beta. • TOTP, HOTP and Steam Guard codes, SHA-1 / SHA-256 / SHA-512, 6 or 8 digits • Up to 20 settings fields, each with one or more accounts • Import from otpauth:// links, Google Authenticator exports and Bitwarden steam:// entries • PIN lock with an on-screen keypad, and accounts encrypted on the watch with a key from the PIN • Delete an account on the watch (hold UP) • Works on 114 Garmin watch models, from the fēnix 5 to the fēnix 9