Where Does Yubico Authenticator Keep Data?
Yubico Authenticator stores TOTP secrets on the YubiKey itself, with app preferences only on each device.
Last updated
Yubico Authenticator holds almost nothing on disk. TOTP secrets live on the YubiKey hardware, which is why plugging the key into any computer shows the same accounts. The app stores window state and per device preferences locally and nothing sensitive.
That inverts normal backup advice. Copying app data folders achieves nothing; the key is the backup surface. Register backup keys with services in advance or keep printed recovery codes. Losing the only key with no spares means account recovery flows.
Where Yubico Authenticator stores this, by platform
YubiKey hardware (app prefs in local app data)
Secrets never leave the key. Exact prefs paths may vary by version. Back up by enrolling spare keys and storing service recovery codes.
YubiKey hardware (app prefs in Library)
Same hardware model as Windows. Touch the key when prompted; no secret material lands in keychain or files.
YubiKey hardware (via NFC or USB)
Mobile reads the same on key secrets over NFC or cable. Keep a second key enrolled for travel so one loss never locks every account.
Frequently asked questions
Can I back up Yubico Authenticator by copying files?
No. Secrets stay on the hardware key by design. Enroll a spare YubiKey on each service and file the printed recovery codes instead.
Why do my accounts appear on every computer?
The app reads them from the plugged in key each launch. Nothing syncs through cloud accounts, which is exactly the security property buyers wanted.
Notice an outdated path? Let us know.