Support

That is expected. SSem TouchOTP’s security key is bound to the fingerprints enrolled at the time, and macOS invalidates the key when they change. This prevents someone from secretly adding a fingerprint later and using it to open the vault.

If you have a backup: Reset… → Create Vault with Touch ID → import the backup in Settings › Export or Import Backup…. See the User Guide for details. Without a backup, you’ll need to set up two-step verification again with each service (for example with its recovery codes).

No. A password fallback would let anyone who has seen your password open the vault, so we deliberately left it out. Keep a backup in case Touch ID can’t be used.

Unfortunately there is no way to recover it. Backups are encrypted so that only the passphrase opens them, and we never know the passphrase or the file contents. If the vault still opens, make a new backup with a new passphrase.

No. The app has no network access and doesn’t sync. To move to another Mac, import a backup file. Copying the vault file itself doesn’t work; it won’t open on another Mac.

TOTP codes are based on the current time. Make sure “Set time and date automatically” is on in System Settings › General › Date & Time. If the code is about to change (the remaining time is red), use the next one. For counter-based (HOTP) accounts, clicking the row (when no code is shown) or ↻ creates a new code and advances the counter by one each time.

After you cancel the Touch ID prompt once, the panel stops showing it automatically. Click Unlock with Touch ID in the panel. If Touch ID is locked after too many failed attempts, unlock Touch ID with your macOS login password first.

A Secure Enclave fingerprint key can only be created for a user account with a login password. Set a password in System Settings › Users & Groups and try again.

Only one copy of SSem TouchOTP runs at a time. Use the one in the menu bar. To open another copy, quit the running app first. The App Store handles updates.

The vault file was replaced with a copy older than the last one saved (for example by restoring it from Time Machine). Accounts you deleted may be back, or recently added ones may be missing, so check the list. If you rolled it back yourself on purpose, click Keep This State.

To keep codes from leaking through screen recordings, screen sharing or screenshots, SSem TouchOTP excludes its windows from capture. When contacting us, please type out the text you see instead.

Bring Google Authenticator’s “Export accounts” QR code onto your Mac as an image and add it on Add Account › QR Image. If there are several QR codes, add them all. See the User Guide for details.

Quit the app, move it to the Trash, and delete the folder ~/Library/Containers/com.levelupsoft.touchotp. The security keys left in the keychain are useless without the vault file; if you reinstall, they are replaced when you create a new vault. See the User Guide for details.