KH 2FA

Secure 2FA authenticator with encrypted vault, screen QR code scanner, and OTP autofill.

KH 2FA is a fast, lightweight, and completely private two-factor authentication (2FA / TOTP) manager for your browser. It safeguards your accounts with client-side encryption, eliminating the need to reach for your mobile phone every time you log in. KEY FEATURES • Client-Side Encrypted Vault: All your 2FA secrets are encrypted locally using AES-256-GCM derived from your personal PIN. Your secrets are never stored unencrypted. • 1-Click Screen QR Scanner: Capture QR codes directly from your browser tab to set up new accounts in seconds without needing mobile scanning apps. • Smart In-Field Autofill: Automatically detects 2FA verification input fields across login pages and fills in your one-time code with a single click. • Full RFC 6238 & Steam Guard Support: Compatible with standard 6, 7, and 8-digit codes, custom hash algorithms (SHA-1, SHA-256, SHA-512), custom countdown periods (15s, 30s, 60s), and Steam Guard alphanumeric codes. • Privacy Mask (Peek Mode): Blur your 2FA codes with a single click to protect against shoulder surfing in public places or during screen presentations. Hovering over any card reveals the code instantly. • Favorite Pinning: Star your most important accounts to keep them pinned at the top of your list. • Anti-Brute-Force Protection: Automatic rate-limiting lockout temporarily pauses entry attempts after repeated incorrect PIN entries. • Auto-Lock on Idle & Sleep: Automatically clears sensitive keys from memory and locks the vault whenever your system sleeps or is locked. • Backup & Restore: Export encrypted backups anytime to keep your authentication keys safe. • Multiple Themes: Choose between Midnight Cyan, Pure OLED Black, Nord Arctic, and Clean Light. ZERO CLOUD TRACKING & 100% PRIVATE KH 2FA works entirely offline on your local device. It does not send your data to external servers, does not use tracking cookies, and includes zero third-party telemetry. HOW TO USE 1. Click the KH 2FA icon in your browser toolbar and set up a master PIN. 2. Add your 2FA accounts by scanning a screen QR code, uploading an image, or typing/pasting your secret key. 3. Click any account card to copy its one-time code, or use the autofill button directly on login pages. SUPPORT & ISSUES If you have any questions, encounter a bug, or have a feature request, please visit our open-source GitHub repository: https://github.com/pov-pisal/KH-2FA/issues