Support

support@dfacto.ai, on every tier including Free. We reply within 2 business days. Paid tiers add a stated response time, not a different willingness to answer.

Bugs and feature requests are better in the issue tracker, where the discussion is public and the fix is linkable. Security reports go to security@dfacto.ai instead — never to a public issue.

If you still have your recovery key, use it — it unwraps the same vault key and lets you set a new passphrase. If you have neither, the vault cannot be opened. There is no reset, no backdoor and no support ticket that can help, because there is no server holding a copy and no key escrow. That is the same property that means a breach of us cannot expose your secrets.

This is the reason the extension makes you write the recovery key down before it will finish setup, and the reason export exists and is never gated.

Rotor imports plain otpauth://URIs, scanned QR codes, and Google Authenticator's otpauth-migration:// batch export — including multi-QR batches, which most importers get wrong. Import is additive: nothing you already have is overwritten or silently dropped, and conflicts are resolved row by row by you.

Two clicks, three formats: a plaintext otpauth:// list, an encrypted backup file, and a QR sequence that imports straight back into Google Authenticator. No account, no network, no version check and no upsell in the way. Steam accounts are excluded from the Google QR format by name, with the reason shown, because that format has no Steam type.

Not yet — it has not been submitted. Until it is, install by building from source; the steps are on the home page and in the repository README. We would rather say that plainly than put a button here that lands on a 404.

After 14 days the extension returns to Free. Nothing breaks, nothing is removed, no banner nags you, and every account you added during the trial keeps generating codes. Free is the whole version 1.0 product.