# 2FA Authenticator

> Open-source (MIT) Chrome extension, free to use, that generates TOTP two-factor authentication codes — the same six-digit codes as Google Authenticator — inside the browser. No sign-up. Secret keys, account names and codes never reach our servers: they are stored in the browser, and in the user's own Google account if Chrome Sync is on. 200,000+ users, rated 4.6/5 from 266 reviews on the Chrome Web Store. Current version 1.15.1. Not affiliated with Google.

- Imports Google Authenticator's export QR code (Transfer codes → Export codes) and any standard otpauth:// QR code.
- Can scan a QR code from the screen, so no phone is needed to set up 2FA.
- Optional password protection: AES-256-GCM, PBKDF2 with 600,000 iterations, recovery code.
- Export to a file (plain or encrypted); automatic local backups (last seven kept).
- Manifest V3 with no host permissions and no content scripts; codes can be inserted into the current page on request (right-click or Ctrl+Shift+Y).
- Free plan and Pro (since 1.14.0): installations from before 1.14.0 keep unlimited accounts; new installations may have a limit on how many accounts they hold for free, which Pro (monthly or yearly subscription, or a one-time lifetime purchase, paid through Stripe with Link as merchant of record) removes. The limit only stops adding accounts — existing codes, export, backups, restoring and sync always work. It is checked on the device from the last policy the server signed, so a limit already received also applies offline; until the extension has reached the server once, nothing is limited.
- Once a day the extension checks in with api.authenticator.sh: a random install id (linked to an email address only when that person buys Pro), version, languages, the number of accounts (never which ones), a few settings, whether it already holds its license key, and a closed list of billing events. Never secrets, account names, issuers, codes or sites.

## Product

- [Chrome Web Store listing](https://chromewebstore.google.com/detail/2FA/ebhcbenbgjmaebpgbldimndmfomjmphd): install page, rating and reviews
- [How it works](https://www.authenticator.sh/how-it-works): cryptography, storage, permissions, network egress, the daily billing check-in and license verification, threat model, reproducible build
- [FAQ](https://www.authenticator.sh/faq): common questions, including why codes are rejected, whether it is free, and what the extension sends to our server
- [Pro](https://www.authenticator.sh/pro): what Pro adds, what stays free, managing or cancelling a subscription
- [Source code](https://github.com/authenticator-sh/2fa): MIT licence
- [Security policy](https://www.authenticator.sh/security): vulnerability disclosure
- [Privacy policy](https://www.authenticator.sh/privacy): what the daily check-in sends, purchases, processors, retention, your rights

## Blog

- [All articles](https://www.authenticator.sh/blog)

- [Best authenticator extensions for Chrome (2026)](https://www.authenticator.sh/blog/best-authenticator-extensions-for-chrome): Seven Chrome extensions that give you 2FA codes, compared on users, rating, price, open source and whether you need an account or a phone. Numbers from the Chrome Web Store.
- [Authy desktop alternative: where to get 2FA codes on a computer now](https://www.authenticator.sh/blog/authy-desktop-alternative): Authy's desktop apps shut down on March 19, 2024 and Authy has no export. Free replacements for Windows, macOS, Linux and Chrome compared, and how to move your accounts over.
- [Google Authenticator for Chrome: there is no official extension. Here is what works](https://www.authenticator.sh/blog/google-authenticator-for-chrome): Google makes Google Authenticator only for Android and iPhone. How to get the same 2FA codes in Chrome, and how to move your accounts over with Google's own export QR code.
- [Microsoft Authenticator alternative: 2FA codes on your PC, and how to switch](https://www.authenticator.sh/blog/microsoft-authenticator-alternative): Microsoft Authenticator runs only on phones and has no export. Free alternatives for PC, Chrome and phone compared, what changes for a work account, and how to switch.
- [Authenticator app without a phone: how to get 2FA codes on your computer](https://www.authenticator.sh/blog/authenticator-app-without-phone): Yes, 2FA works without a phone. Free authenticator apps for PC, Mac and Chrome compared, when a phone is still required, and how to keep codes on a computer safely.
- [How to move 2FA to a new phone, and what to do if you lost the old one](https://www.authenticator.sh/blog/move-2fa-to-new-phone): Move Google Authenticator, Microsoft Authenticator, Authy or 2FAS codes to a new phone, see which need the old one, and get back into your accounts after losing your phone.
- [2FA code not working? Why an authenticator code is rejected, and how to fix it](https://www.authenticator.sh/blog/2fa-code-not-working): Your authenticator app's 2FA code is rejected as invalid or wrong? Usually the website made a new QR code, or the code comes from another entry or another app. The causes, with a fix for each.

## Tools

- [TOTP code generator](https://www.authenticator.sh/generator): generate a 2FA code from a secret key in the browser, nothing sent anywhere

## 2FA setup guides

- [All guides](https://www.authenticator.sh/2fa)
- [Roblox authenticator app](https://www.authenticator.sh/2fa/roblox)
- [Discord authenticator app](https://www.authenticator.sh/2fa/discord)
- [Epic Games authenticator app](https://www.authenticator.sh/2fa/epic-games)
- [GitHub authenticator app in your browser](https://www.authenticator.sh/2fa/github)
- [Instagram authentication app](https://www.authenticator.sh/2fa/instagram)
- [Facebook authentication app](https://www.authenticator.sh/2fa/facebook)
- [X (Twitter) authentication app](https://www.authenticator.sh/2fa/x-twitter)
- [Google Account authenticator app](https://www.authenticator.sh/2fa/google)
- [Microsoft account authenticator app](https://www.authenticator.sh/2fa/microsoft)
- [Amazon authenticator app](https://www.authenticator.sh/2fa/amazon)
- [PayPal authenticator app](https://www.authenticator.sh/2fa/paypal)
- [Coinbase authenticator app](https://www.authenticator.sh/2fa/coinbase)
- [Binance authenticator app](https://www.authenticator.sh/2fa/binance)
- [Reddit authenticator app](https://www.authenticator.sh/2fa/reddit)
- [Twitch authenticator app](https://www.authenticator.sh/2fa/twitch)
- [PlayStation authenticator app](https://www.authenticator.sh/2fa/playstation)
- [Nintendo Account authenticator app](https://www.authenticator.sh/2fa/nintendo)
- [Fortnite 2FA](https://www.authenticator.sh/2fa/fortnite)
- [Ubisoft authenticator app](https://www.authenticator.sh/2fa/ubisoft)
- [Activision authenticator app](https://www.authenticator.sh/2fa/activision)
- [Yahoo authenticator app](https://www.authenticator.sh/2fa/yahoo)
- [Workday authenticator app](https://www.authenticator.sh/2fa/workday)
- [Availity authenticator app](https://www.authenticator.sh/2fa/availity)
- [eBay authenticator app](https://www.authenticator.sh/2fa/ebay)
- [Stripe authenticator app in your browser](https://www.authenticator.sh/2fa/stripe)
- [TikTok authenticator app](https://www.authenticator.sh/2fa/tiktok)
- [LinkedIn authenticator app](https://www.authenticator.sh/2fa/linkedin)
- [Patreon authenticator app](https://www.authenticator.sh/2fa/patreon)
- [Etsy authenticator app](https://www.authenticator.sh/2fa/etsy)
- [Dropbox authenticator app](https://www.authenticator.sh/2fa/dropbox)
- [Canva authenticator app](https://www.authenticator.sh/2fa/canva)
- [AWS authenticator app for MFA](https://www.authenticator.sh/2fa/aws)
- [Cloudflare authenticator app](https://www.authenticator.sh/2fa/cloudflare)
- [EA authenticator app](https://www.authenticator.sh/2fa/ea)
- [Rockstar Games authenticator app](https://www.authenticator.sh/2fa/rockstar-games)
- [Slack authenticator app](https://www.authenticator.sh/2fa/slack)
- [Zoom authenticator app](https://www.authenticator.sh/2fa/zoom)
- [Shopify authenticator app](https://www.authenticator.sh/2fa/shopify)
- [Intuit authenticator app for QuickBooks and TurboTax](https://www.authenticator.sh/2fa/intuit)
- [WordPress.com authenticator app](https://www.authenticator.sh/2fa/wordpress)
- [Authenticator app for LastPass](https://www.authenticator.sh/2fa/lastpass)
- [GoDaddy authenticator app](https://www.authenticator.sh/2fa/godaddy)
- [Wix authenticator app](https://www.authenticator.sh/2fa/wix)
- [Evernote authenticator app](https://www.authenticator.sh/2fa/evernote)
- [Vimeo authenticator app](https://www.authenticator.sh/2fa/vimeo)
- [Wikipedia authenticator app](https://www.authenticator.sh/2fa/wikipedia)
- [HubSpot authenticator app](https://www.authenticator.sh/2fa/hubspot)
- [Mailchimp authenticator app](https://www.authenticator.sh/2fa/mailchimp)
- [Zendesk authenticator app](https://www.authenticator.sh/2fa/zendesk)
- [Zapier authenticator app](https://www.authenticator.sh/2fa/zapier)
- [Zoho authenticator app](https://www.authenticator.sh/2fa/zoho)
- [Authenticator app for your 1Password account](https://www.authenticator.sh/2fa/1password)
- [Dashlane authenticator app](https://www.authenticator.sh/2fa/dashlane)
- [Authenticator app for your NordPass account](https://www.authenticator.sh/2fa/nordpass)
- [Norton account authenticator app](https://www.authenticator.sh/2fa/norton)
- [Tumblr authenticator app](https://www.authenticator.sh/2fa/tumblr)
- [Substack authenticator app](https://www.authenticator.sh/2fa/substack)
- [Kickstarter authenticator app](https://www.authenticator.sh/2fa/kickstarter)
- [Plex authenticator app](https://www.authenticator.sh/2fa/plex)
- [Samsung account authenticator app](https://www.authenticator.sh/2fa/samsung)
- [Uber authenticator app](https://www.authenticator.sh/2fa/uber)
- [Atlassian authenticator app](https://www.authenticator.sh/2fa/atlassian)
- [Figma authenticator app](https://www.authenticator.sh/2fa/figma)
- [Heroku authenticator app in your browser](https://www.authenticator.sh/2fa/heroku)
- [Okta authenticator app](https://www.authenticator.sh/2fa/okta)
- [IBMid authenticator app](https://www.authenticator.sh/2fa/ibm)
- [ChatGPT authenticator app](https://www.authenticator.sh/2fa/chatgpt)
- [Mistral authenticator app](https://www.authenticator.sh/2fa/mistral)
- [Hugging Face authenticator app](https://www.authenticator.sh/2fa/hugging-face)
- [ElevenLabs authenticator app](https://www.authenticator.sh/2fa/elevenlabs)
- [Notion authenticator app](https://www.authenticator.sh/2fa/notion)
- [Kick authenticator app](https://www.authenticator.sh/2fa/kick)
- [FACEIT authenticator app](https://www.authenticator.sh/2fa/faceit)
- [Bethesda.net authenticator app](https://www.authenticator.sh/2fa/bethesda)
- [Square Enix authenticator app](https://www.authenticator.sh/2fa/square-enix)
- [Wargaming authenticator app](https://www.authenticator.sh/2fa/wargaming)
- [Minecraft authenticator app](https://www.authenticator.sh/2fa/minecraft)
- [Xbox authenticator app](https://www.authenticator.sh/2fa/xbox)
- [Proton Mail authenticator app](https://www.authenticator.sh/2fa/proton-mail)
- [AOL authenticator app](https://www.authenticator.sh/2fa/aol)
- [Snapchat authenticator app](https://www.authenticator.sh/2fa/snapchat)
- [Upwork authenticator app](https://www.authenticator.sh/2fa/upwork)
- [Vercel authenticator app](https://www.authenticator.sh/2fa/vercel)
- [Supabase authenticator app](https://www.authenticator.sh/2fa/supabase)
- [GitLab authenticator app](https://www.authenticator.sh/2fa/gitlab)
- [Docker Hub authenticator app](https://www.authenticator.sh/2fa/docker-hub)
- [DigitalOcean authenticator app](https://www.authenticator.sh/2fa/digitalocean)
- [Kraken authenticator app](https://www.authenticator.sh/2fa/kraken)
- [OKX authenticator app](https://www.authenticator.sh/2fa/okx)
- [Bybit authenticator app](https://www.authenticator.sh/2fa/bybit)
- [KuCoin authenticator app](https://www.authenticator.sh/2fa/kucoin)
- [Crypto.com authenticator app](https://www.authenticator.sh/2fa/crypto-com)
- [Gemini authenticator app](https://www.authenticator.sh/2fa/gemini-exchange)
- [Bitget authenticator app](https://www.authenticator.sh/2fa/bitget)
- [MEXC authenticator app](https://www.authenticator.sh/2fa/mexc)
- [Gate authenticator app](https://www.authenticator.sh/2fa/gate)
- [Netlify authenticator app](https://www.authenticator.sh/2fa/netlify)
- [Namecheap authenticator app](https://www.authenticator.sh/2fa/namecheap)
- [Bitbucket authenticator app](https://www.authenticator.sh/2fa/bitbucket)
- [Hetzner authenticator app](https://www.authenticator.sh/2fa/hetzner)
- [Twilio authenticator app](https://www.authenticator.sh/2fa/twilio)
- [n8n authenticator app](https://www.authenticator.sh/2fa/n8n)
- [Microsoft 365 authenticator app](https://www.authenticator.sh/2fa/microsoft-365)
- [Login.gov authenticator app](https://www.authenticator.sh/2fa/login-gov)
- [Salesforce authenticator app](https://www.authenticator.sh/2fa/salesforce)
- [Gusto authenticator app](https://www.authenticator.sh/2fa/gusto)
- [One Healthcare ID authenticator app](https://www.authenticator.sh/2fa/optum)
- [NaviNet authenticator app](https://www.authenticator.sh/2fa/navinet)

## Optional

- [The whole site as one document](https://www.authenticator.sh/llms-full.txt): the FAQ, every setup guide, how it works, Pro and the release notes, in full
- [What's new](https://www.authenticator.sh/whats-new): release notes for the current version
- [Support](https://www.authenticator.sh/support)
- [Contact us](https://www.authenticator.sh/contact-us): every email address (support, security, business, general) and public channel