Authenticator — All in One

All-in-one 2FA: scan setup QR codes off your screen, import Google Authenticator exports, generate TOTP codes offline.

Generate two-factor authentication codes right in your browser toolbar — fully offline, with nothing ever leaving your device. Authenticator — All in One replaces the "grab your phone, open an app, squint at six digits, type them before they expire" routine with a single click. Your codes are already on screen, next to the site asking for them. ──────────────────────────────────────── FEATURES ──────────────────────────────────────── 📷 SCAN THE SETUP QR CODE OFF YOUR SCREEN Most authenticator apps assume you have a phone camera pointed at your monitor. This one reads the QR code directly from your screen: • Scan this tab — the fastest path, no prompts, no pickers • Scan another window or monitor — for a QR code in a different app, a PDF, or on a second display • Use your camera — when the code is on paper or on someone else's screen All three decode locally. No image is ever uploaded anywhere. 📦 IMPORT FROM GOOGLE AUTHENTICATOR Already have accounts in Google Authenticator? Use its "Transfer accounts" / "Export accounts" screen to show an export QR code, then scan it. Every account arrives at once, and you get a review list to pick exactly which ones to keep before anything is saved. ⏱️ LIVE CODES WITH A COUNTDOWN RING Each account shows its current code with a ring that drains as the window closes, plus the exact seconds remaining. The ring turns amber in the final five seconds, so you know when to wait for the next code instead of typing one that's about to expire. 📋 ONE-CLICK COPY Click a code to copy it. A "Copied" badge confirms it. There's also a dedicated copy button, and full keyboard support — Tab to a code and press Enter. 🔗 PASSWORD + CODE IN ONE PASTE (NERSC AND SIMILAR) Some logins want your password and the one-time code typed as a single string with nothing between them. NERSC works this way, and typing both by hand against a 30-second clock is needlessly stressful. Fill in the optional "Password prefix" when you add or edit an account, and one click copies password+code already joined, ready to paste. Accounts set up this way are marked in the list, so you always know which form you're about to paste. The password is masked in the interface, never shown next to the code, and stays on your device like everything else. Leave the field empty and copying behaves exactly as before. 🔍 SEARCH AND REORDER Type to filter by service or account name — useful once you have more than a handful. Drag the handle on any row to arrange accounts in the order you actually use them. 🌍 SIX LANGUAGES English, 简体中文, 日本語, Español, Deutsch, and Français. Follows your browser's language automatically, or pick one manually. 🌗 LIGHT, DARK, AND AUTO THEMES Auto follows your system appearance. Light and dark are available if you prefer to pin one. ⚙️ MANUAL ENTRY AND ADVANCED OPTIONS No QR code? Type the secret key by hand, or paste an otpauth:// link straight into the field and every setting fills itself in. Supports 6 or 8 digit codes, custom periods (10–120 seconds), and SHA-1, SHA-256, or SHA-512 — so it works with services that don't use the common defaults. 🙈 PRIVACY-CONSCIOUS DISPLAY Turn on "Hide codes until I hover" to keep your codes blurred until you point at them — handy when screen sharing or working in an open office. Stored secret keys are masked when editing and only revealed when you ask. 💾 BACKUP AND RESTORE Export your accounts to a JSON file you control, and import it back on another computer. Duplicate accounts are detected and pre-unchecked, so re-importing a backup never silently doubles your list. ──────────────────────────────────────── PRIVACY ──────────────────────────────────────── This extension has no servers, no accounts, and no analytics. It makes no network requests of any kind. Your secret keys and generated codes stay in Chrome's local extension storage on this device. They are never transmitted, synced, or shared. Codes are computed on your machine with the browser's built-in Web Crypto API. Screen and camera captures are processed in memory to look for a QR code and are never saved or sent anywhere. Because everything is local, the extension works with no internet connection at all. ──────────────────────────────────────── STANDARDS ──────────────────────────────────────── Implements TOTP as specified in RFC 6238, built on HOTP (RFC 4226), and verified against the official test vectors for SHA-1, SHA-256, and SHA-512. Because it follows the standard rather than targeting particular websites, it works with any account whose two-factor setup gives you a QR code or a base32 secret key. If the service offers "authenticator app" as a 2FA option, this will generate its codes. Note: counter-based (HOTP) codes are not supported. These are rare; almost every service uses time-based codes. ──────────────────────────────────────── GOOD TO KNOW ──────────────────────────────────────── Two-factor codes are a second factor, not a backup of your password. Keep the recovery codes your provider gave you somewhere safe and separate, and consider exporting a backup of this extension's accounts so a lost or reset browser profile doesn't lock you out.