Autothenticator and your privacy

Autothenticator · Updated 18 October 2026

• No ads, no tracking, no analytics in any app or extension.
• Free users never create an account, and nothing leaves the device (apart from the leaked-password check, which sends only a fragment of a hash).
• What Winfrasoft holds for a sync account:
  • the portal: the account id, the email address from the sign-in, the linked sign-ins, the edition, and the device list;
  • the relay: encrypted data, device public keys and names, sizes and times, and IP addresses for 14 days.
• Never held: account names, websites, secrets, codes or passkeys in readable form.
• Emails come from noreply@autothenticator.com, through Azure Communication Services in Europe, with no open or click tracking. They're sent when a sign-in is added or removed, for invitations, and for other account notices.
• The website loads no third-party code.
• Deleting the account is available on the website, and linked from every app's settings. It removes the account and the synced vault. Data on each device stays until the app is removed.
• Sharing a chosen code box (optional, off by default, never on work installs): when someone picks the code box on a site, the extension can send only the site's address and the box's location to Winfrasoft, to improve filling for everyone. No account, device or address is sent.
• The privacy policy is published in all four languages at a single address.