Keoterm Authenticator

Add an account

Your Principal will have a QR code on screen in Staff Profiles.

Scan the QR

Type the key

Point it at the QR code. Nothing leaves this phone — the camera never uploads anywhere.

Backup & about

Keoterm Authenticator · v1.0

Your keys live on this phone and nowhere else. If you lose the phone, ask your Principal to re-issue — it takes them half a minute. Or keep a backup file somewhere safe.

How it works

Each account holds a secret key that never leaves this phone.
The code is worked out from that key and the current time, so it changes every 30 seconds and works with no signal at all.
Standard TOTP (RFC 6238), so these accounts can also be scanned into 1Password, Authy or any other authenticator.

If a code is refused

Check this phone's clock is set automatically — a clock more than a minute out will produce codes the terminal won't accept.
Each code can only be used once. Wait for the next one.