KEY369 · 4 min read
Why an authenticator rejects a QR code: TOTP and passkeys
A QR code is a way to encode data in an image. Its appearance does not tell you what it is for. Key369 needs a TOTP setup QR supplied by a service when you connect an authenticator app.
Two common situations
Authenticator setup
You opened a service’s 2FA settings and chose an authenticator app. The service provides the key Key369 will use to generate codes.
Passkey sign-in
Your browser asks another device to confirm a sign-in. This QR starts a different sign-in mechanism. Key369 cannot turn it into a TOTP secret.
If your computer says “Sign in with a passkey” or asks you to use a phone to sign in, follow the sign-in method provided by the service. To enable authenticator codes, locate its authenticator-app setup separately.
Where to find the right QR
- Sign in to the service using your usual method.
- Open account security and two-factor authentication settings.
- Select the authenticator-app option, if supported.
- Scan that setup QR with Key369 and confirm the setup using the generated code.
Not every service supports TOTP. Key369 cannot add this sign-in method to a service that does not offer it.
If the camera cannot read a valid setup QR
Keep the whole QR in view, increase the screen brightness, avoid glare and check camera permissions. If the QR is on the same phone, importing its image may be easier. Use manual entry if the service offers a text setup key.
Keep 2FA secrets out of online QR decoders. Get the manual key directly from the service’s settings without publishing a screenshot.
Which value does Key369 need?
| Field | What to enter |
|---|---|
| TOTP secret key | The persistent setup key supplied by the service you are protecting. |
| Email code | The one-time code used to verify a Key369 account sign-in. |
| Cloud backup password | The password you chose when creating that backup. |
| Device password in the web app | The local vault password on this device. |
In the browser extension, email sign-in and unlocking the backup are separate steps. After signing in, enter the cloud backup password. A new email code does not replace it.
If you forgot the backup password
First, check another device where the keys are still available and any saved encrypted files. Email verifies your account but cannot recover a forgotten decryption password. If neither the keys nor a usable backup remain, use the affected service’s recovery codes or account recovery process.