Google Authenticator is an excellent solution for generating one-time passcodes for two-factor authentication. But while the app makes perfect sense for many, if you’re stuck in the Apple ecosystem, you’re better off using iCloud Keychain. And that’s truer than ever, as Apple recently made it easy to move your OTPs from Google Authenticator to iCloud.

One word of caution: You should only migrate all of your OTPs to iCloud Keychain if you’re fully committed to the Apple ecosystem. If you’re using an Android phone or Windows PC where you might need access to some of these credentials, you should stick with Google Authenticator or other password managers that can also generate login codes.

That said, for those who only use Apple products, having all of your login codes in iCloud Keychain is much more convenient. It makes logging in seamless because you can simply copy and paste one-time passwords or autofill them, no matter what device you’re using. While Google Authenticator is a nice app, you’ll still have to go to your iPhone to find and enter codes every time. This can be especially annoying if you primarily log into websites on your Mac, especially if you’re used to the convenience of iCloud Keychain’s AutoFill.

Another advantage to using iCloud Keychain to manage these codes is the seamless migration. If you buy a new iPhone or Mac, you don’t have to do anything to import your one-time passwords either. Google Authenticator also supports account syncing, but you’ll still have to log in to the app separately on your new iPhone and it’s limited to phones only. With iCloud Keychain, all of your one-time passwords will also be available on your Mac, assuming you signed in to your Apple ID when you first set up your computer.