Code inbox
Verification codes should reach the team, not one person's phone.
Codes for marketplace, advertising and hosting panels often go to a single phone; when that person is away, work stops. App-based codes are on the item today; SMS codes from the company line join them soon with the forwarder app.
App-based codes
TOTP: in the item, in the extension, in one click.
Scan the account's two-step verification QR code into the item. The code is generated in your browser; the extension also fills the code field on the sign-in form.
Everyone with permission can generate the same code, so nobody waits for someone's phone. Who generated a code is recorded as exposure.
- Scan a QR code or enter the key
- The same codes as Google Authenticator
- Code filling in the extension
- Time-remaining indicator
SMS codes · forwarder coming soon
Codes arriving on the company line, channel by channel.
A forwarder app installed on an Android phone with the company SIM encrypts and forwards the SMS that match your rules. The code appears in the code inbox and in the extension for team members with permission on the channel.
Sender rules decide which SMS goes to which channel. Rules are signed on an admin's device; the phone does not apply a rule whose signature does not verify. Messages that match no rule are never sent.
- Channels such as marketplace, advertising, hosting
- Sender and content rules
- A record of who opened a code, and when
- Deletion when the retention ends
Where each part stands
App-based codes are in use today. On the SMS side the web screens are ready; the forwarder app for the phone is being released.
- App-based codes (TOTP)In items and in the extension.Available
- SMS-dependent accounts reportLists accounts whose code goes to one person's phone and suggests moving them to the code inbox or an app-based code.Available
- Channels, rules and the code inboxIn the web app, including the phone pairing wizard.Available
- Android forwarder appThe app installed on the phone holding the company SIM.Coming soon
- Mobile notificationsA notification in the iOS and Android app when a new code arrives.Coming soon
- E-mail channel and office modemCodes arriving in a shared mailbox, and a SIM modem gateway.Planned
Care with bank and government codes
Sharing verification codes of bank and government systems may breach their terms. On channels in these categories, Passhield asks for an explicit acknowledgement, limits retention to one hour and recommends a separate user per person.
A sender rule made of only "*", which would forward every message on the line, cannot be saved without acknowledging a warning either.
Questions about the code inbox
Does the server see the SMS contents?
No. The forwarder seals the SMS to the channel's public key; the server only knows which channel received a message and when. Only the devices of members with permission on the channel can open it.
Are the line's personal messages forwarded too?
No. Only messages that match your rules are forwarded; the rest never leave the phone. A broad rule that would forward every message on the line asks for a warning and acknowledgement as well.
What if the phone goes off?
If the forwarder sends no heartbeat for 30 minutes, the organisation's owners and admins are e-mailed; the code lines screen shows its last state.
Share verification codes with your team securely.
Start using app-based codes today, and see in the report which account's code goes to whose phone.