2FA Authenticator Assistant

Companion to github.com/wuzf/2fa. Deploy a 2FA instance, then connect to view, copy and autofill two-factor authentication codes.

2FA Authenticator Assistant (2FA 验证助手) is the browser companion for the open-source wuzf/2fa project. Connect your own instance to view, copy and fill time-based one-time passwords (TOTP). It supports 15 languages in one extension: Simplified Chinese, Traditional Chinese, English, Japanese, Korean, German, French, Spanish, Portuguese (Brazil), Italian, Russian, Turkish, Indonesian, Vietnamese and Thai. The interface follows your browser language or a manual selection in Display language. Unsupported browser languages use English. What’s new in 1.2.0: Check “Autofill this account on this website” and click Fill. The code is filled, the account is remembered and the browser asks for access to the website; once you allow it, codes are filled automatically on every page of that website. Automatic filling is still off by default. Permissions now cover a whole website instead of a single page, and HTTP pages, including private network addresses, can be enabled too. On the official sign-in pages of common services such as PayPal, AWS and OpenAI, accounts are now matched by name. Code field detection better tells SMS and email codes apart from authenticator codes, so fewer codes go into the wrong field. A code is never filled into a page that has already been left or closed. On touch screens the popup has larger buttons and adapts to the screen. Updating does not change existing site permissions or enable offline use. A self-hosted instance is required. Deploy the project, add your accounts and sign in to that instance in the same browser profile before connecting the extension. The extension does not provide hosted accounts and does not connect directly to arbitrary authenticator products. Features • View current and upcoming codes; search by service, username or email. • Pin frequently used accounts and remember account bindings for individual websites. • Fill a code with the account's Fill button or Ctrl+Shift+U (Command+Shift+U on macOS). • Explicitly enable automatic filling for a website, while filling a code or with “Autofill on this website”. After you approve access to that site, the extension detects code fields on its pages. It fills the remembered account or a unique reliable match, or offers a choice of matching accounts. • Work with common single-field and segmented code inputs, accessible same-origin frames and open Shadow DOM. Copy and paste remains available when a page is incompatible. • Switch between self-hosted instances while keeping each instance's website bindings separate. Connection options The default mode uses your existing website login session. The extension retrieves account secrets from your configured instance and calculates codes temporarily in its background process without persistently storing the seeds. The instance's tab may be closed, but code generation requires a working connection and a valid login session. You can explicitly enable "Allow offline use" (允许离线使用). After synchronization, the extension stores the current instance's account secrets and time calibration in this browser and can calculate codes after the instance tab is closed, the browser restarts or the network becomes unavailable. This local cache contains raw secrets and has no additional password encryption; enable it only on a trusted device. Turning offline use off, switching instances or revoking instance access deletes this extension cache. Uninstalling deletes the extension's local data. While offline, the extension cannot immediately learn about server-side account deletion or session revocation. Permissions and data Site access is requested only when you configure an instance or explicitly enable automatic filling for a target website. Automatic filling is additionally restricted to the authorized full origin (scheme, host and port), or to a single page if you limit it in the settings. Settings, account bindings and favorites stay in the current browser and are not synchronized through your browser account. The extension handles account names, usernames, TOTP secrets and codes, and reads the page structure needed to fill a code. On an identifiable Google TOTP page, it can use the displayed signed-in email to match the account. This processing serves code display, matching and filling only. Filling shares the selected code with the target page; a multiple-account panel displays names and usernames for that site's candidates. The complete account vault and seeds are not provided to target websites. There are no ads, telemetry or developer relay service. Online requests go to your configured instance for accounts, server time and service icons; that instance and its hosting provider receive normal network requests. The extension does not click Submit, although a website may submit its own form after the code is filled. For desktop Chrome and Edge. Incognito mode and counter-based HOTP codes are not supported. Project: https://github.com/wuzf/2fa Deployment guide: https://github.com/wuzf/2fa/blob/main/docs/DEPLOYMENT.md Support: https://github.com/wuzf/2fa/issues https://github.com/wuzf/2fa/blob/main/extension/PRIVACY.md