Hi Product Hunt 👋

Every authenticator I tried wanted something from me: an account, a cloud, an analytics SDK, or permission to read every page I visit.

But there was another problem: 2FA still made me leave my computer every time I signed in. Even with Google Authenticator it's the same ritual: phone, unlock, app, find the account, read six digits, back to the browser.

I thought 2FA could be simpler. So I built 2FA Authenticator around two principles: your security shouldn't require trust, and your authenticator shouldn't make you leave the browser.

No servers. No sign-up. No telemetry. No host permissions. Your secrets stay in your browser.

It's MIT-licensed, and every release ships SHA-256 checksums so you can verify the build you actually installed.

It's been on the Chrome Web Store for a while now: ~200k weekly users, 4.7★, Featured.

I recently shipped v1.13. Here's what's in it:

⌨️ Right-click → insert code. Straight into the login field. No popup, no phone, no typing six digits.

🔐 Password + passkey unlock. Your records are encrypted locally with AES-256-GCM, with a recovery code if you forget your password. Unlock with Touch ID, Windows Hello, or your phone via WebAuthn.

🔗 Share a code by link. Give someone a working code without handing over the account. The link carries a short-lived sequence of pre-computed codes — never the secret. Expires in minutes; optional password for untrusted channels.

🪟 Popup, floating window, or side panel. The last two stay open while you switch tabs.

Also: QR import from camera/screen/file, automatic local backups, Credential Exchange Format import/export, 20 languages, and full offline support.

I genuinely believe this is what a modern authenticator should feel like.

Happy to answer any questions.