I forgot a password
There is no password reset or cloud recovery. An encrypted offline backup can be restored only if you still know its independent backup password.
LukaOTP
LukaOTP Support
Self-service guidance for the LukaOTP Chrome extension. LukaOTP is a local-first TOTP authenticator: the extension has no account system, cloud recovery, analytics, advertisements, trackers, or external network requests.
What’s changing in v0.3.15
The v0.3.15 draft is being prepared for Chrome Web Store review; it is not yet public.v0.3.15 adds local import of user-generated Google Authenticator migration QR images, multi-account preview and selection, duplicate detection, and atomic rollback if batch persistence cannot complete. Lock-timeout controls are synchronized between the unlock screen and Settings. Migration images are processed locally with no Google sign-in, cloud API, or external network request. The public Chrome Web Store release remains v0.3.5 until review and publication are independently confirmed.
Common questions
QR import does not find an account
Scan the visible tab, choose a local TOTP QR image, or select a user-generated Google Authenticator migration QR image. Recognition and migration preview happen locally; the image is not uploaded or retained. Delete sensitive export images after import.
The vault locked again
The optional unlock session defaults to 15 minutes. Real interaction may renew it; automatic TOTP refresh does not.
I need to move or restore my vault
Create a user-controlled encrypted offline backup before clearing Chrome data or uninstalling. Restore shows a secret-free preview before confirmation.
Before clearing data or uninstalling
Back up first.Clearing extension storage or uninstalling LukaOTP removes the local vault. The developer has no copy and cannot recover it or a forgotten password.
Contact LukaOTP
General support and feature requests
Report a bug, ask a general question, or suggest a feature. Contact email is optional.
Security or privacy report
Use the separate private-response form for a suspected vulnerability or privacy issue. A contact email is required so maintainers can follow up.
Never send authentication secrets.Do not include TOTP provisioning keys or QR codes, one-time passwords, master or backup passwords, recovery codes, session secrets, cookies, credentials, or an unredacted backup file.
These forms are hosted by Google Forms. Opening a form connects to Google; information you choose to submit is sent to and stored by Google for LukaOTP maintainers. The LukaOTP extension itself still makes no external network requests and sends no user data.