Version 1.13.0
Paste the list your old authenticator exported and every link in it becomes an account. One action, not one per account — and the same links come back out again whenever you want to leave.
One link, a list of them, or a Google Authenticator transfer link — the same field reads all three.
A list of otpauth:// links is the most sensitive text you will ever paste anywhere: every line is a seed that generates codes for that account forever. It is worth being exact about where it goes.
The parsing happens in the popup. There is no upload step and no server to receive one — the extension makes no network request while importing, and the only request it ever makes on its own is an optional check of your clock.
When a line cannot be read you get its number and nothing else. Nothing goes to the console either: parsing used to log the name and issuer of every account it read, which was one line per scan before and would have been your entire 2FA inventory on screen after a two-hundred-account paste. It logs nothing now.
A file of plain links is not encrypted, and you are told so before it is written — including when an account had to be left out of it, which you are asked about rather than informed of afterwards. The password-protected export is still there and still the one for a backup you intend to keep.
The optional coloured initials are drawn from the account itself — its own letter, its own stored colour. There are no favicon lookups, because fetching an icon per service would tell whoever answers precisely which sites you hold 2FA for.
None of this has to be taken on trust. The code that decides what happens to a pasted list is one readable file: read it on GitHub.
A link carries up to an hour of ready-made codes and never your secret key. Whoever you send it to opens it in any browser — nothing to install, no account to make. When the hour is up, there is nothing left in the link to show.
The share button beside an account makes the link. Add a password and send it by another route — on its own, neither half opens anything.
The full technical changelog is on GitHub: release notes.