Two-factor authentication, secured on your device
KAVRI generates and protects the verification codes your accounts use for two-factor authentication (TOTP), kept in an encrypted vault on your device and unlocked with Windows Hello. Cross-device sync is available, but it's entirely optional.
What KAVRI does today
KAVRI is a two-factor authentication app — not a password manager, and not a browser extension. Here's what's actually built in.
Two-factor authentication codes
Add accounts by scanning a QR code or entering a setup key, organize them into projects, and generate the time-based codes your accounts ask for.
Encrypted local vault
Every account KAVRI stores is kept in an AES-256-GCM encrypted vault on your device, unlocked with Windows Hello or your device's biometric lock.
Backup & recovery
Create an encrypted backup protected by a password or a personal Recovery Key, so you can restore your accounts if you switch or reset a device.
Optional KAVRI Sync
Turn on Sync to keep the same accounts available on more than one device. Sync is off by default and never required to use KAVRI.
Local-first by design
KAVRI is built to work entirely on your device, with no KAVRI account required.
Adding accounts, generating codes, and creating local backups all work without an internet connection. There is no KAVRI cloud account — connecting Google is never required to use KAVRI, and everything continues to work exactly the same with Sync turned off.
How KAVRI uses your Google account
Google connection is optional and only used if you turn on KAVRI Sync.
When you choose to connect Google, KAVRI requests permission to create and update its own encrypted data in your Google Drive, and to read your Google account's email address and name so KAVRI can show you which account is connected. KAVRI cannot browse, read, or modify the rest of your Google Drive.
Before anything is uploaded, KAVRI encrypts your account data on your device. Google stores only that encrypted file — it cannot read its contents.
You can turn Sync off at any time from KAVRI's settings. Doing so removes that device's Google sign-in and sync keys locally. See our Privacy Policy for full details, including what happens to data already stored in Google Drive after you disconnect.
Learn more
Questions about how KAVRI works or handles your data.