Wallace support

Frequently asked questions

I lost the passphrase of my encrypted backup.

It cannot be recovered, not by Wallace and not by the publisher, and the backup cannot be opened without it. If Wallace still works on one of your devices, export a new backup with a new passphrase and delete the old file.

I lost my Mac, or all my devices.

If you use iCloud Keychain, your accounts arrive on a new device once you sign in to your Apple Account and open Wallace. Otherwise install Wallace, choose Settings → Encrypted backup → Restore from backup…, and select your backup file and passphrase. If you have neither, use each service’s recovery codes or account recovery to set up two-factor authentication again.

How do I move to a new Mac?

Sign in with the same Apple Account and turn on iCloud Keychain; your accounts then appear in Wallace by themselves. Or restore your encrypted backup on the new Mac. Compare a few codes before you remove anything from the old Mac.

My codes are not accepted.

Codes depend on the exact time. Check that your Mac sets its date and time automatically (System Settings → General → Date & Time). If the time is right, compare the code settings of the account (algorithm, digits, period) with what the service showed when you set it up.

Can I bring my accounts from another authenticator app?

Wallace imports the plain-text TXT export of AegisVault and CSV files, and it reads a setup QR code from a picture. Delete the export file once you have checked the import, because anyone with that file can generate your codes. Google Authenticator transfer codes are not supported.

Does Wallace send my accounts anywhere?

No. Your accounts and codes stay in Apple’s Keychain on your own devices. The only connection Wallace makes on its own is the optional download of a public breach list from Have I Been Pwned, which contains nothing about you. The details are in the privacy policy.

Wallace shows a breach report for one of my services. What now?

The service has reported an incident; this does not confirm that your own account was affected. Go to the service through a route you trust, not through a link in an email, and read its advice. Change your password there if it may have been exposed or if you used it elsewhere, and check active sessions and recovery options. Keep two-factor authentication turned on.

Contact

Email: wallace@benpho.com. Wallace is a private project, so an answer may take a few days.

Never send setup keys, QR codes, codes, backup files or backup passphrases by email. The publisher will never ask for them. The publisher cannot see your accounts and cannot restore access to them.