Version 1.14.0

If you already use it, nothing changes

This release adds a paid plan, Pro. An installation from before this version keeps unlimited accounts, free, exactly as before — there is nothing you need to do.

POSTapi.authenticator.sh/v1/sync

{  "iid": "8b0e3c1a-4f5d-4e2b-9a7c-1d2e3f4a5b6c",  "ver": "1.14.0",  "ui_lang": "en",  "browser_lang": "en-US",  "installed_at": null,  "legacy": true,  "legacy_src": "update",  "accounts": 12,  "vault": false,  "sync": true,  "open_mode": "popup",  "style": "classic",  "dark": false,  "pid": "pol_7f3a",  "lid": null,  "has_key": false,  "key_hint": null,  "opens": [{"d":"2026-10-14","n":3}],  "events": []}

The entire daily check-in, field by field. The account count is a number: no field could carry an account's name, secret or code.

How it works

1Installed before this version? Your installation keeps unlimited accounts, free, as before.
2A new installation may have a limit on how many accounts it holds for free. If it has one and it is full, adding another opens the Pro screen, and every account already there keeps working.
3When Pro is offered to you, it appears in Settings. Paying happens on Stripe, in a new tab. Pro turns on by itself in the browser you paid from; on another computer, open “Settings” → “Pro” → “I have a license key” and enter the key from your email.

What changed, and what cannot

An authenticator that starts talking to a server deserves a hard look, so here is exactly what it sends and what the new limit is able to do.

Your accounts never leave your computer

Once a day the extension checks in with api.authenticator.sh. It sends an anonymous id created by this installation, the version and languages, when it was installed and whether that predates this release, how many accounts it holds — a number, never which ones — whether password protection and sync are on and how it opens, which policy and license it holds and whether it already has its license key, the last four characters of that key, how many times it was opened on each day since the last check-in, and a short list of billing events such as “the paywall was shown”. Never your secrets, account names, issuers, codes or the sites you use them on.

The limit can only stop an addition

Every account you have keeps showing its code, and keeps working with export, backups, restoring and sync — with or without Pro, and if a Pro subscription ends. Nothing is ever hidden or locked.

Checked on your computer

The limit and your license are checked on your computer, from the last data our server signed and the extension verified — so a limit already received still applies offline. Until the extension has reached our server once, nothing is limited.

Paying never touches your codes

Checkout is Stripe's, in a new tab, with Link as the seller of record. From a purchase we receive the email address you paid with, so we can send your license key and send it again if you lose it — never your card details.

None of this has to be taken on trust. Every field the check-in sends is listed in one short function: read it on GitHub.

Also in this release

There is a monthly and a yearly subscription, and a one-time lifetime purchase. Which ones you see can differ while we find the right prices. If you cancel a subscription, Pro stays on until the end of the period you paid for.
Lost your license key? “Restore a purchase” on the Pro screen sends it to the email you paid with.
When you uninstall, the feedback page now carries the same anonymous id: as it opens it tells our server that installation was removed, and an answer, if you give one, is linked to it. Answering is still optional.
No new permissions. Still no host permissions and no content scripts.
The privacy policy is rewritten to match: what is sent and why, who processes it, how long it is kept, and how to have it deleted.

The full technical changelog is on GitHub: release notes.

Not installed yet?

Free to use, open source, and no account to sign up for.

Add to Chrome