NordPass is bringing time-based one-time passwords (TOTP) into its password manager for personal accounts, introducing a built-in feature it calls NordPass Authenticator. The company is pitching the change as a convenience and continuity play: fewer separate apps, fewer device-switching headaches, and less risk of losing access to codes when moving phones.
In NordPass’ description, TOTP generation becomes another vault item, stored and accessed alongside credentials under the same protections as the rest of the vault. The company also emphasizes biometric gating, positioning biometrics as an added hurdle that can be required before a user can reveal sensitive vault contents such as one-time codes.
NordPass says the authenticator inherits its security model, describing vault encryption using XChaCha20 under a zero-knowledge architecture. The rollout messaging also leans on practical safeguards such as autolock, suggesting that a stolen or unattended device should not automatically grant access to stored codes if biometric checks are enabled.
The company says NordPass Authenticator is available to Premium and Family customers across the browser extension and iOS and Android apps. Setup is described as attaching a two-factor code to an existing password item and completing biometric and email verification prompts, and NordPass also says the codes can remain accessible when credentials are shared, with recipients viewing the codes on their own devices using their own biometric authentication.
Sources: NordPass
—
By the Mobile ID World Editorial Team
