ShareAuth

Show your team's one-time code for the site you are on, and fill it in.

ShareAuth keeps your team's two-factor (TOTP) secrets in one shared, encrypted vault. This extension brings the right code to the page you are signing in to. Open the extension on a login page and it shows the current code for that site, with a countdown. Copy it, or fill it straight into the code field — including pages that split the code into one box per digit. • Finds the secret by site. Add the site's domain to a secret in ShareAuth and the extension picks it automatically (subdomains included). • Says when it is guessing. If no secret claims the site, it falls back to matching secret names and labels the result as a guess. • Several accounts on one site? Pick the right one from a searchable list, or browse every secret of your team. • Works with your own server. Point it at app.shareauth.net or at a self-hosted ShareAuth instance. Built to need as little as possible: • No access to the sites you browse. The current tab is only read when you click the extension, and only its address. • One host permission: the ShareAuth server you enter in the settings, nothing else. • A read-only token. Signing in mints an API token that can list secrets and generate codes, and nothing more — it cannot create, edit or delete anything. It is kept in memory by default and disappears when the browser closes. • Every generated code is recorded in your team's access log, exactly as in the web app. Requires a ShareAuth account (https://shareauth.net/en/).