CloudOTP — Encrypted 2FA Codes

Import, encrypt, sync, and use your TOTP authenticator codes directly in Chrome.

CloudOTP brings your two-factor authentication codes into Chrome. Import TOTP accounts, generate codes locally, and click a code to fill a verification field or copy it to your clipboard. FEATURES • Import Google Authenticator transfer QR codes, Aegis JSON exports, 2FAS backups, Bitwarden JSON/CSV exports, and standard otpauth links. • Scan an authenticator QR code from your phone using your computer’s camera in a focused capture tab. • Add accounts manually, search your accounts, and see automatically refreshed codes. • Sign in with Google to sync your encrypted TOTP secrets across your Chrome installations. • Unlock with a six-digit PIN or supported fingerprint/device verification. • Keep your selected Google account across browser restarts, with a 15-second grace period after unlocking. • Recognize supported services with bundled, consistent service icons. WHAT’S NEW IN 1.4.1 • Fixed account persistence and temporary connection errors that could cause unwanted sign-outs. • Added a 15-second unlock grace period. • Fixed camera permission handling and simplified the QR capture screen. • Added a local fallback QR decoder and fixed Google Authenticator export parsing. • Added Bitfinex, BitMart, and Bitstamp artwork and bundled all supported icons. • Removed the SMS section, tabs, and background SMS polling. PRIVACY AND SECURITY TOTP secrets are encrypted with AES-256-GCM before cloud sync. Codes, camera frames, and import files are processed locally. Account labels, issuers, and TOTP settings are stored as sync metadata. Your selected account profile and Firebase refresh credential are remembered locally until sign-out or session invalidation. Access tokens remain in session storage. The unlocked vault key has a 15-second reuse window in session storage; signing out clears it. Autofill runs only when you click a code; CloudOTP does not request persistent access to every website. This extension version does not send analytics events or contain advertising. The six-digit PIN is a convenient local lock, not strong protection against offline guessing. Forgotten PINs cannot currently be recovered. Keep your service recovery codes and verify imported codes before removing your previous authenticator. Learn more: https://getcloudotp.com/ Support: support@getcloudotp.com