Cifra — Authenticator

2FA (TOTP) codes for the site you are visiting, with a zero-knowledge encrypted vault synced across browsers.

Cifra is a two-factor authentication (TOTP) app that lives in your browser and always shows the right code for the site you are on. WHY CIFRA • The right code, right away: open Cifra on a sign-in page and the code for that site is at the top. One click copies it. • Easy to add accounts: scan the QR code shown on a site's 2FA setup page with one click, or type the secret. • Zero-knowledge sync: your secrets are encrypted on your device (AES-256-GCM, key derived from your master password with Argon2id) before they are synced. The server only ever stores ciphertext and never sees your master password. • Works across browsers: the same vault in Chrome, Edge and Firefox, and it keeps working offline. • Bring your codes: import from Google Authenticator, Aegis, 2FAS or otpauth:// URI lists, and make encrypted exports. • Safe by default: the vault locks after a period of inactivity and the clipboard is cleared 30 seconds after you copy a code. • Strong account protection: a 24-word recovery key, plus optional 2FA with an authenticator app, passkeys or backup codes, and sign-in with Google. • Private: no tracking, no analytics, no ads. Open source (AGPL-3.0). Codes follow RFC 6238 (TOTP) and work with any site that supports authenticator apps.