2FA Auth

Browser 2FA authenticator. Local TOTP + optional password encryption. Private, no cloud. / 浏览器2FA验证器，本地TOTP+可选加密，隐私优先。

**English:** 2FA Auth lets you generate secure two-factor authentication (TOTP) codes directly in your browser — no phone or app required. **Key Features:** - Generate standard TOTP codes (compatible with Google, GitHub, Microsoft, AWS, etc.) - Add accounts easily by scanning QR codes (from screenshots or exports) or manual entry - Live updating codes with countdown timer - Search your accounts instantly (press / to focus search) - **Optional strong client-side encryption**: Protect all your secrets with a password using AES-GCM + PBKDF2. Everything happens locally in your browser. - Export / Import backups (JSON) - 100% private: No cloud sync, no analytics, no data ever leaves your device - Clean, modern, dark-mode friendly interface **Security & Privacy:** Your 2FA secrets are extremely sensitive. 2FA Auth stores them locally using chrome.storage. When you enable password protection: - Secrets are encrypted on your device before saving. - We use modern Web Crypto (PBKDF2 with 250,000 iterations + AES-GCM). - Your password and keys **never leave your computer**. The developers have zero access to your data. - If you forget your password, your encrypted secrets are permanently lost — always keep a backup using the Export feature! This makes 2FA Auth one of the most private and transparent 2FA solutions available for the browser. **Perfect for:** - Users who want a desktop/browser 2FA solution - People who prefer not to use their phone for 2FA - Anyone who wants local encrypted storage without trusting third-party cloud services Always keep secure backups of your secrets! --- **中文：** 2FA Auth 让你直接在浏览器中生成安全的双因素认证（TOTP）验证码 —— 无需手机或额外 App。 **主要功能：** - 生成标准 TOTP 验证码（兼容 Google、GitHub、Microsoft、AWS 等几乎所有服务） - 通过扫描二维码（截图或导出文件）或手动输入快速添加账号 - 实时更新验证码 + 倒计时进度环 - 快速搜索账号（按 / 键聚焦搜索框） - **可选强客户端加密**：使用 AES-GCM + PBKDF2 为所有密钥设置密码保护。全部在浏览器本地完成。 - 支持 JSON 导出 / 导入备份 - 极致隐私：无云端同步、无数据分析、数据永不离开你的设备 - 界面简洁现代，支持深色模式 **安全与隐私：** 2FA 密钥属于极度敏感信息。2FA Auth 仅使用浏览器本地存储（chrome.storage）。开启密码保护后： - 密钥会在保存前于你的设备上完成加密 - 采用现代 Web Crypto 标准（PBKDF2 25万次迭代 + AES-GCM） - 你的密码和密钥**永远不会离开电脑**，开发者完全无法访问你的数据 - 如果忘记密码，加密后的密钥将永久无法恢复 —— 请务必使用「导出」功能做好备份！ 这让 2FA Auth 成为浏览器中最隐私、透明的双因素认证工具之一。 适合： - 希望在电脑/浏览器使用 2FA 的用户 - 不想把 2FA 绑定手机的用户 - 追求本地加密存储、不信任第三方云服务的用户 请始终妥善保管你的密钥备份！