简体中文

2FA guide

Get the 2FA Secret Key from a QR Code

A 2FA setup QR code is just an otpauth:// link containing your secret key. If you have a screenshot or photo of it, you can read the key back out — useful for backups, for moving to another app, or for generating codes on a computer.

How to read the secret from an image

  1. Open the generator and choose “Upload QR code”.
  2. Select the screenshot or photo. PNG, JPG and other common image formats work; the QR code does not need to be cropped.
  3. The otpauth:// link is filled into the input box and the current code appears. Use the eye icon to reveal the link; the secret is the value after “secret=”.

Tips for images that will not scan

  • Use a screenshot rather than a photo of a screen when possible; moiré and reflections make decoding harder.
  • Make sure the whole QR code, including the white border around it, is visible.
  • If the image is very small or blurry, zoom in on the original and take a new screenshot.
  • If you have a webcam, “Scan QR code” works directly from a phone screen.

What if the QR code is a Google Authenticator export?

Export codes start with otpauth-migration:// and can contain many accounts. The upload button recognises them automatically and imports every account as a separate saved key.

Keep it private

Decoding runs entirely in your browser using the built-in barcode detector or the ZXing library; the image is never sent anywhere. The secret you extract gives full access to your 2FA codes, so store it only in a password manager or another place you trust.

Frequently asked questions

Can I extract the key from any QR code?

Only from 2FA QR codes, which contain an otpauth:// or otpauth-migration:// link. Other QR codes are reported as not containing a 2FA secret.

Does it work on mobile?

Yes. On a phone, “Upload QR code” lets you pick a screenshot from your photo library.

Related guides