CometOTP

Your CometOTP two-factor codes in your browser, even when your phone is not with you.

CometOTP shows the two-factor codes from CometOTP on your Android phone in your browser, and can fill them into sign-in pages. Your phone stays where you add and edit services; the browser keeps an encrypted, read-only copy, so your codes are at hand even when your phone is not. • End-to-end encrypted. You pair by scanning a QR code with your phone and checking that both screens show the same six digits. Your services are encrypted on your phone with a key the relay never sees. • Locked when you are away. The extension has its own password, and can unlock with a passkey: Touch ID, Windows Hello, your phone or a security key. It locks itself after a time without use, when your computer locks and when the browser quits. • Fills codes for you. Turn it on in the settings, and a CometOTP button appears in code fields. Choose a service and its code is filled in: the site sees only that code. Services you used on a site are offered there first, and a site posing as another gets nothing without your say-so. • Always current. A change on your phone shows in your browser when you next open CometOTP there, and within 15 minutes otherwise. Removing the browser on your phone deletes its copy. • Our relay or yours. Sync goes through a small relay that stores only encrypted data and keeps no IP addresses. You can run your own. • Open source: https://github.com/gigabytedevelopers/CometOTP-Browser Needs CometOTP for Android, with a lock (a PIN, a password or your screen lock) set.