Generate one-time verification codes for two-factor authentication.

<p>In Tails 7.6 (March 2026), we replaced the
<i>[[KeePassXC|https://keepassxc.org/]]</i> password manager with
<i>Secrets</i>.</p>

<p>You can open your previous <i>KeePassXC</i> database using <i>Secrets</i>,
because both <i>Secrets</i> and <i>KeePassXC</i> use the same file format to
store passwords.</p>

<p>If you miss more advanced features from <i>KeePassXC</i>, you can install
<i>KeePassXC</i> as [[additional
software|persistent_storage/additional_software]]</p>

In Tails, choose **Apps&nbsp;▸ Tails&nbsp;▸ Persistent Storage**.

Verify that the Persistent Folder feature is turned on.

To create a new safe, select the **New Safe** button.

The safe is encrypted and protected by a passphrase. In the configuration screen **Protect your safe**:

Specify a passphrase of your choice in the **Password** text box.

Type the same passphrase again in the **Confirm Password** text box.

Select **Create**.

<div class="caution">
<p>It is impossible to recover your passphrase if you forget it!</p>

<p>To help you remember your passphrase, you can write it on a piece of
paper, store it in your wallet for a few days, and destroy it once
you know it well.</p>
</div>

After creating the safe, select **Open Safe** and enter the passphrase again to unlock it.

If you have a safe named *Passwords.kdbx* in your *Persistent* folder, *Secrets* automatically displays a dialog to unlock it.

Enter the passphrase for this safe and select **Unlock**.

<p>You can also double-click your password safe from the <i>Files</i> browser
to open it using the <i>Secrets</i> password manager.</p>

<h1 id="2fa">Using <i>Secrets</i> as an authenticator app for two-factor authentication</h1>

Many websites offer two-factor authentication as a safer method than using just a password. For example, you can configure an authentication app, like Google Authenticator, to generate a one-time code of 6 digits when signing in to a website.

You can use *Secrets* to generate such one-time codes in Tails. The
technology used to generate these codes is called [[!wikipedia time-based
one-time password]] (TOTP).