Only with the device you’re adding. While the code is on screen, it’s what lets a device join your vault, so treat it like your master password.
What protects you
- It expires. A code lasts 3 minutes.
- It works once. After one device joins, or you reject one, the code is used up.
- Nothing is sent before you approve. Your vault copies only after you check that both devices show the same symbols and choose They match, approve.
If the symbols don’t match, choose Reject. Someone else is trying to join.
Moving the code between devices
Scanning the QR code with a phone is the safest way. When you have to paste it instead, copy it in a way only you can see, like Apple’s Universal Clipboard. Don’t post it anywhere or send it to anyone else.