Overview
A simple OTP manager extension for Chrome
Securely stores your OTP secrets in Chrome's storage and log in to your OTP-protected accounts with just two clicks. All secrets are stored using encryption and the Web Credential Management API to keep your data safe. Usage: Adding a new OTP secret: 1) click the OTP-Manager extension icon 2) click the "Add new" button and follow the instructions Logging in to an OTP-protected account: 1) When prompted to enter a OTP code, click the OTP-Manager extension icon 2) Select OTP Manager from the list of available credentials 3) For some websites, you may need to click into the OTP token field before clicking the extension icon. Security: How are my secrets stored? On first launch, OTP Manager generates a AES-GCM key and stores it in the extension's storage. This key is used to encrypt your secrets before they are stored on the page itself using the Web Credential API. The key is never stored in plaintext, and is only accessible to the extension itself when the user invokes the extension and selects the identity. How are my secrets transmitted? When the user invokes the extension to generate a OTP token, the extension request the encrypted secret from the page. To fulfill this request, the user has to confirm by selecting the OTP Manager identity from the list of available credentials. Then, the extension decrypts the secret and generates the OTP token, which is then sent back to the page. None of your secrets are sent to any third party servers, and the extension only communicates with the page itself. License This project is licensed under the MIT License - see the LICENSE file for details Contribution and source: https://github.com/MatteoValentini-AT/OTP-Manager
Details
- Version1.0.4
- UpdatedOctober 16, 2023
- Offered bymatteovalentini.at
- Size200KiB
- LanguagesEnglish
- Developer
Email
support@matteovalentini.at - Non-traderThis developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.
Privacy
This developer declares that your data is
- Not being sold to third parties, outside of the approved use cases
- Not being used or transferred for purposes that are unrelated to the item's core functionality
- Not being used or transferred to determine creditworthiness or for lending purposes