# Secure Authenticator

> Fast, encrypted two-factor authentication (2FA/TOTP) for Chrome. AES-256 encrypted vault, QR import, one-click copy. 100% local — no servers, no tracking, no account required.

## What it does
Secure Authenticator is a Chrome extension that generates time-based one-time passwords (TOTP) for two-factor authentication. It replaces phone-based authenticator apps like Google Authenticator, Microsoft Authenticator, and Authy by running entirely in the browser.

## Key features
- One-click copy: Click any account to copy the current code. Auto-clears clipboard after 30 seconds.
- Scan from Page: Capture QR codes directly from any webpage without screenshots or phone transfers.
- Google Authenticator import: Transfer all accounts from Google Authenticator in a few clicks.
- AES-256 encryption: Vault encrypted with a passphrase-derived key (PBKDF2, 100K iterations, random salt).
- Encrypted backups: Export and restore passphrase-protected backup files.
- Keyboard shortcut: Ctrl+Shift+L (Cmd+Shift+L on Mac) to open instantly.
- Works offline: Zero network requests. Everything runs locally.

## Privacy
- No analytics, no telemetry, no crash reporting
- No accounts, no servers, no data collection
- All secrets stored locally in Chrome's encrypted storage
- Passphrase never written to disk

## Links
- Website: https://2favault.app
- Privacy Policy: https://2favault.app/privacy
- Support: https://2favault.app/support
- Chrome Web Store: https://chromewebstore.google.com/detail/secure-authenticator/

## Technical details
- Platform: Chrome extension (Manifest V3)
- Encryption: AES-256-GCM with PBKDF2 key derivation
- Standards: TOTP (RFC 6238), HOTP (RFC 4226)
- Storage: Chrome local storage (chrome.storage.local)
- Session: Chrome session storage with 30-minute timeout
- Permissions: storage, clipboardWrite, downloads, activeTab