A LITTLE CLARITY GOES A LONG WAY
Frequently asked questions•
How Nhip Auth works, what stays private, and what each tool can do.
How are verification codes generated?
Codes follow RFC 6238 TOTP using your 2FA setup secret and device clock. Web Crypto calculates them in your browser. Secrets are not sent to a server.
Does this site create account secrets?
No. Obtain the setup secret from your service when enabling two-factor authentication. This tool cannot recreate a lost secret, bypass 2FA or recover an account.
Why is my code being rejected?
Check automatic device time, the exact secret, and your provider’s algorithm, digits and period. Most codes change every 30 seconds; try the next cycle. HOTP, Steam Guard and push authentication are not supported.
Are my secrets or content saved?
The authenticator saves no secrets, codes or history. Text editing and Facebook link parsing run locally. Notes use localStorage only if you enable saving. Theme preferences use sessionStorage and never include authentication secrets.
Where does the IP information come from?
Clicking check requests /cdn-cgi/trace on this domain for the public IP and connection details supplied by Cloudflare. Cloudflare receives normal request metadata. This does not determine your exact address, ISP, IP reputation or proxy status.
Can this automatically check Facebook account status?
Not currently. This version checks formatting and provides profile links for manual inspection. A failed profile image or login requirement does not prove an account has been deleted.
Can I look up a UID from a Facebook username?
No username lookup API is configured. The tool extracts numeric IDs already present in supported profile, group and page URLs. Post, photo and video IDs are not treated as user IDs.
Can I share notes across devices?
There is no cloud sync or share link. Download a .txt file and open it on another device. Browser-saved notes may be lost if you clear site data, use private browsing or switch browser profiles.
How do I switch between light and dark?
Use the Light/Dark button in the header. Your choice stays with you between pages in this browser session.
Does the site have ads or tracking?
Adsterra banners load automatically in a separate-origin frame across the site. Advertising scripts do not run in the application origin and cannot read your inputs. The ad partner may receive your IP and browser data and use cookies when ads load.
Does clearing a secret also clear the clipboard?
No. Clearing removes the app state and input. Your device manages its clipboard and operating system memory; this tool cannot guarantee erasure of every trace.