Terms of service

Last updated 2026. By using Crew2FA you agree to these terms.

Plain-English summary

• Crew2FA is free, ad-supported, and provided as-is.
• You are responsible for what you store here, including any third-party TOTP secrets.
• Do not use this service to violate any third party's terms of service or any law.
• We may suspend or terminate accounts that abuse the service.
• Disputes are governed by the laws of the State of California, USA (operator's seat).

1. The service

Crew2FA (the "Service") is a multi-tenant web application that lets you store and share TOTP authenticator secrets within an organization you control. The Service is operated on a best-effort basis with no warranty of uptime or data integrity beyond commercially reasonable effort.

2. Your account

• You must be at least 13 years of age (or 18 if you reside in a jurisdiction with a higher age of digital consent). The Service is not directed to children.
• You must provide a valid email address and a strong password.
• You must enable two-factor authentication with an external authenticator app before the Service will let you in.
• You are responsible for safeguarding your recovery codes. If you lose both your authenticator device and your recovery codes, your account is unrecoverable.
• You must not share your account credentials with anyone outside your organization.

3. What you store

You may store TOTP secrets for accounts you have a legitimate right to share with the other members of your organization. You agree not to store secrets for accounts you do not control, and not to use the Service to bypass any third party's access controls.

4. Acceptable use

You agree not to:

• Use the Service for any unlawful purpose.
• Use the Service to violate any third party's terms of service.
• Attempt to access another user's account or organization.
• Upload malware, phishing pages, or content intended to compromise other users.
• Use the Service to send unsolicited bulk messages.
• Circumvent rate limits or other technical safeguards.

5. Advertising

Public pages display advertising from third-party networks (currently Google AdSense). Authenticated pages do not. You acknowledge that ad networks may set cookies and process your IP address, user-agent, and referrer under their own privacy policies. The operator of Crew2FA does not control those networks.

6. Termination

We may suspend or terminate your account at any time if we reasonably believe you have violated these terms or if continued operation of the Service requires it (for example, a security incident affecting your data). Where possible we will give 30 days' notice by email.

7. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. THE OPERATOR DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE.

8. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE OPERATOR'S TOTAL LIABILITY FOR ANY CLAIM ARISING OUT OF OR RELATING TO THE SERVICE SHALL NOT EXCEED ONE HUNDRED US DOLLARS (USD 100). IN NO EVENT SHALL THE OPERATOR BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, OR CONSEQUENTIAL DAMAGES.

9. Changes

We may update these terms from time to time. Material changes will be announced on the landing page at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance.

10. Governing law

These terms are governed by the laws of the State of California, USA, without regard to its conflict-of-laws rules. The exclusive venue for any dispute shall be the state and federal courts located in California, to the extent permitted by law.

11. Contact

Email admin@crew2fa.com with any question about these terms.