TOTP custody · Documentation-based guide with original exercise

TOTP in a vault or separate app: map access dependencies

Content updated:

Scope: Documentation reviewed on 15 October 2026. Examples are fictional and tests are proposed; CallsIQ has not performed product tests.

Short answer

Vault-based TOTP may simplify use but requires planning for lost vault access. Separate apps need not be independent when sharing device or recovery dependencies. Map passwords, codes and alternatives, avoiding recovery that requires opening what it must recover.

Key verification: The map permits authorised recovery without sole dependence on the inaccessible vault or device.

Sources and limitations

Password and code are one click away until the vault cannot open. The useful question is which failures your access routes share rather than which option always wins. This guide proposes preventive fictional-account review without passwords, QR codes or authentication secrets.

Two distinct NordPass functions

NordPass documents Authenticator for compatible-service codes separately from Nord Account MFA. Custody of another account’s TOTP differs from protecting the vault itself. Check current platform, plan and availability.

Fictional dependency map

TOTP in a vault or separate app: map access dependencies: table 1
ElementReview question
Authorised client accountWhere are password and code?
VaultWhat does re-entry require?
DeviceWould loss affect both apps?
RecoveryIs an independent authorised route available?

Two separate apps on one phone do not alone solve loss of that phone. A second device is not independent if it needs a secret stored only on the first. Record recovery custody and currency checks without exposing recovery material.

Practice-account test

Use an authorised account without real data to observe ordinary login and available recovery. Do not terminate all production sessions to simulate failure. Distinguish actual testing from a configuration checkbox and keep recovery instructions out of public screenshots.

Choose for the need

CallsIQ has not run this NordPass test. Existing tools may suffice for required custody and recovery. Evaluate convenience alongside failure separation; choosing a format certifies neither absolute phishing resistance nor complete security.

Sources and limitations

Documentary review: . Content type: Documentation-based guide with original exercise.

Sources describe terms and capabilities stated by their owners. Proposed protocols and fictional examples do not establish product tests performed by CallsIQ.

How to report a correction

Check current terms

Consider these options if they solve the problem described. Confirm features, limits and availability in your country.

NordPassAffiliate link

The labelled commercial links may earn CallsIQ a commission or referral reward. Our commercial policy.

How this guide was prepared

Official sources, explained calculations and clearly labelled examples. Read about our methodology and use of AI in writing.