Terms of use

Last updated 1 August 2026.

Latch is a free tool from Alpha Marketing Group. Using it means agreeing to what is below. It is short on purpose.

The service

Latch stores two-factor (TOTP) secrets you give it and returns the current codes, through a web vault and an HTTP API. It is offered free of charge, with no card, and with a cap of 50 authenticator entries per account.

⚠

Understand the trade-off before you rely on this. Putting 2FA codes behind an API removes the “something you have” factor of two-factor authentication. Anyone who obtains your API key holds the second factor for every account in your vault. Keep a second recovery method — backup codes or a hardware key — on anything you cannot afford to be locked out of.

Your responsibilities

Keep your password and API key secret. Rotate the key from Your API if it is ever exposed.
Only store secrets for accounts you are entitled to access.
Do not use Latch to break into anyone else's accounts, to defeat security controls you have not been authorised to bypass, or for anything unlawful.
Do not attempt to reach another user's vault, disrupt the service, or automate abuse of signup.
Back up what matters. Keep your own copy of any TOTP secret you would be unable to re-enrol.

Availability

There is no uptime guarantee, no support commitment and no service level of any kind. The service may change, be interrupted, or be withdrawn at any time. Accounts that abuse the service may be suspended without notice.

As-is, no warranty

Latch is provided “as is”, without warranty of any kind, express or implied, including merchantability, fitness for a particular purpose and non-infringement. You use it at your own risk.

Limitation of liability

To the maximum extent the law allows, Alpha Marketing Group is not liable for any indirect, incidental, special or consequential damages, or for lost profits, lost data, or loss of access to any account, arising out of your use of Latch. Because the service is free, total liability for any claim is limited to zero.

Data and deletion

What is stored, and how to delete it, is set out in the privacy page. You can delete individual entries yourself at any time, and request full account deletion by email.

The software

These terms cover the hosted service at https://latch.cc. The Latch software itself is MIT-licensed; if you would like a copy to self-host, ask at the address below.

Changes

If these terms change materially, the date at the top changes with them. Continuing to use Latch after that means accepting the new version.

Contact

Alpha Marketing Group — alphamarketinggroup916@gmail.com.