bkey

Phone-mediated biometric TOTP autofill.

bkey fills two-factor authentication (2FA) one-time codes into websites, but nothing is filled until you ask for it and approve it on your phone. How it works: 1. Pair this browser with the bkey app by scanning a QR code and confirming the matching words on your phone. 2. When a website asks for a one-time code, a small bkey button appears on the code field. 3. Click it, approve on your phone with Face ID, and bkey fills the approved code into that field. Why it's different: • Phone-mediated — a code is requested only after you click the bkey button, and released only after you approve on your paired phone. Nothing is filled silently. • Secrets stay on the phone — your TOTP secrets live in the bkey app and are never copied into the browser. The extension receives a single approved code for the site you are on. • Limited browser storage — the extension stores pairing keys plus opaque site-match metadata. It never stores your one-time-code secrets or page contents. • Private site matching — your phone publishes one-way hashes of the sites that have a code saved, so a web page cannot learn what else is in your vault. Requires the bkey iOS app and a one-time pairing. Note: this version fills one-time codes only. It does not fill usernames or passwords, and it does not read SMS or email.