Your 2FA codes in Chrome, without your phone
Generate and manage TOTP two-factor authentication codes right in your browser. Operates 100% offline with a local AES-256-GCM encrypted vault. Copy verification codes with a single click.
- TOTP authentication codes right in Chrome — no phone required
- Zero-knowledge security with local AES-256-GCM encrypted vault
- 100% offline, zero telemetry, no account required
Fifteen seconds. Ten times a day.
You are focused on your computer. You submit your password, the website demands a two-factor verification code, and your flow stops: find your phone, unlock it, open an authenticator app, scroll through entries, squint at the numbers, and race to type six digits before the timer expires.
2Fa Live moves that entire step into the browser you are already using. Open the extension, find the account, copy the code, and keep working. The two-factor security on your accounts remains untouched — only the phone detour disappears.
The Mobile Detour
Pick up phone, unlock, locate app, memorize code, manually re-type into Chrome. Prone to typos and distraction.
With 2Fa Live
Click the toolbar icon or hit ⌘K, tap the account, and paste the code instantly. Frictionless and precise.
Core Philosophy
Three principles that set 2Fa Live apart
Engineered for developers, IT administrators, and professionals who demand speed, security, and simplicity on desktop.
The code is where you already are
The code is where you already are
Never reach for your phone during a desktop login again. Pinned directly on your Chrome toolbar or side panel, ready whenever you need it.
Simple on purpose
Simple on purpose
Engineered to do one job with excellence: generate and manage TOTP and HOTP codes. No bloat, no password manager overhead, zero unnecessary complexity.
Free, zero-knowledge & offline
Free, zero-knowledge & offline-first
No account creation required, no telemetry, no tracking. All cryptographic calculations run locally with AES-256-GCM client encryption.
Key Features
Everything you need from a modern desktop authenticator
All the essential tools to manage two-factor authentication efficiently, neatly organized and blazingly fast.
RFC-Compliant TOTP & HOTP
Strict conformance to RFC 6238 (TOTP) and RFC 4226 (HOTP). Supports 6-digit and 8-digit codes, 30s or 60s cycles, and SHA-1, SHA-256, or SHA-512 algorithms.
One-Click Clipboard Copy
Click any account row to instantly copy its active 2FA code to the clipboard, complete with an immediate visual 'Copied' badge confirmation.
Instant Search with ⌘K / Ctrl+K
Lightning-fast live search lets you filter through dozens of accounts by service or username without scrolling through long lists.
Custom Avatars & Workspace Tags
Organize accounts with Favorites, Work, and Personal tags. Assign distinct colors and icons so you spot the right account at a glance.
Three Flexible View Modes
Access codes via a rapid-access popup, pin them alongside your active page using the Chrome Side Panel, or manage them in a full-tab dashboard.
Configurable Auto-Lock Protection
Set inactivity auto-lock timeouts (1m, 5m, 15m, 30m, 1h) to purge decrypted master keys from memory whenever you step away from your workstation.
100% Offline Architecture
TOTP codes are mathematically computed directly within your browser from your system clock. No remote server lookups, no network latency.
Comprehensive QR Code Ingestion
Scan setup QR codes via webcam, drag and drop image files, or capture setup codes directly from the active browser tab with a single click.
Encrypted Backups (.ak2fa)
Export password-protected backup archives verified with an automated cryptographic self-test before download, guaranteeing easy restore.
Scale Effortlessly
Every 2FA account organized in one unified view
Whether you manage five personal logins or fifty production servers, cloud consoles, and client accounts, your dashboard remains neat and accessible.
- Workspace tags: Separate client credentials, company systems, and personal logins into organized tabs.
- Visual recognition: Assign recognizable brand icons and custom colors so you can spot services in milliseconds.
- Concealed secrets: Sensitive secret keys remain hidden by default and reveal only upon explicit confirmation.
Zero-Knowledge: Your keys, decrypted exclusively by you
Every OTP secret is cryptographically encrypted client-side prior to storage. Neither server administrators nor external software can inspect your plaintext keys.
AES-256-GCM Vault
Local storage uses Galois/Counter Mode with authenticated encryption (AEAD), ensuring secrets are cryptographically shielded against offline tampering.
PBKDF2 KDF (100,000 Rounds)
Vault master keys are derived via PBKDF2-HMAC-SHA256 with 100,000 iterations and a cryptographically random salt, rendering brute-force attacks infeasible.
Zero-Leakage Memory Hygiene
Decrypted keys reside strictly in ephemeral session memory and are immediately scrubbed when the auto-lock timer elapses or the window closes.
Frictionless Migration
Batch import from Google Authenticator in one click
Migrate all your existing two-factor credentials in seconds without resetting 2FA on every individual website.
- Google Authenticator batch import: Decodes transfer QR codes directly via native protobuf migration parsing (
otpauth-migration://). - Universal format support: Ingests exports from 2FAS (.2fas), Aegis (.json), and standard
otpauth://link lists. - Pre-import inspection: Review accounts before saving, select all or individual records, with duplicates automatically flagged.
Workflow
Up and running in three simple steps
Set up once, and have your authentication codes ready at your fingertips every day.
Add your 2FA account
Paste the Base32 secret key provided by the service, or use 2Fa Live to scan the setup QR code displayed on your screen.
Automatic code generation
The 6-digit TOTP verification code is computed locally and refreshes every 30 seconds with an intuitive countdown ring.
Click to copy & authenticate
Click the account row to copy the code to your clipboard. Paste into the website's verification box and complete your sign-in.
Audience
Who is 2Fa Live built for?
Designed for anyone who works on a desktop often enough that picking up a phone creates an annoying daily interruption.
Developers & Software Engineers
Logging in daily to GitHub, GitLab, AWS, GCP, Cloudflare, staging environments, and VPS terminals — each with distinct 2FA credentials.
DevOps & System Administrators
Managing dozens of remote consoles and production servers. Need instant ⌘K search and verifiable encrypted backup archives.
SaaS Managers & Agencies
Switching between client workspaces, corporate portals, and personal logins. Color avatars make identifying accounts effortless.
Security-Conscious Individuals
Protecting Google, Microsoft, Discord, and personal services without depending on a smartphone while sitting at a computer.
FAQ
Frequently asked questions
Everything you need to know about security, offline capabilities, backup formats, and permissions.
What is 2Fa Live?
2Fa Live is a Chrome extension that generates and manages time-based one-time password (TOTP) two-factor authentication codes. Instead of reaching for your phone every time a site asks for verification, you can view and copy current codes directly in your browser.
What is a TOTP authenticator and how does it work?
TOTP (Time-based One-Time Password, RFC 6238) turns a shared secret key into a 6 or 8-digit numeric code that changes every 30 seconds. Both the browser extension and the login server calculate the exact same code independently from the current time, with no network exchange required.
How are my OTP secrets and private data protected?
All account records and secret keys are encrypted client-side using AES-256-GCM. Your master key is derived via PBKDF2-HMAC-SHA256 with 100,000 iterations and a unique salt. Decrypted keys only exist temporarily in memory and are cleared when the configurable auto-lock timer elapses or the window closes.
Does 2Fa Live work offline?
Yes. TOTP generation is purely mathematical and runs 100% locally on your machine using your system clock and stored encrypted secrets. You do not need an active internet connection to view or copy verification codes.
Can I import accounts from Google Authenticator?
Yes. 2Fa Live features a built-in batch migration parser for Google Authenticator transfer QR codes (the otpauth-migration:// protocol). It also supports unencrypted exports from 2FAS (.2fas), Aegis Authenticator (.json), and standard otpauth:// URL lists with duplicate detection.
Is any of my authentication data sent to a server?
No. By default, 2Fa Live operates completely local-first: your secrets never leave your device. If you optionally configure end-to-end encrypted (E2EE) multi-device sync, only encrypted ciphertext is transmitted. The server has zero knowledge of your encryption keys or OTP secrets.
What is the .ak2fa backup file format?
The .ak2fa format is a password-protected, encrypted backup envelope. When exporting, 2Fa Live runs an automated cryptographic self-verification test to guarantee the backup can be successfully decrypted before letting you save it to disk.
Does 2Fa Live replace my passwords?
No. Two-factor authentication (2FA) is an extra layer of defense that complements your password. You still enter your regular account password first, then provide the one-time code from 2Fa Live to verify your identity.
Is 2Fa Live free to use?
Yes. 2Fa Live is completely free, privacy-first, and requires no account creation or subscription.
Appkiro Ecosystem
Complementary tools on Appkiro
Fast, browser-based utilities for generating QR codes, inspecting security tokens, and creating strong master passwords.
- QR Code GeneratorGenerate QR codes from secret keys or otpauth URLs for secure setup.
- QR Code ReaderScan and decode 2FA setup QR codes from screenshots or local image files.
- Password GeneratorGenerate high-entropy master passwords to secure your encrypted vault.
- Key GeneratorProduce cryptographically secure random keys and Base32 secrets.
- JWT DebuggerInspect and decode JSON Web Tokens after completing a secure login flow.
- Base64 to TextDecode and inspect Base32 and Base64 authentication parameters.
Streamline your two-factor authentication today
Eliminate phone interruptions. Add 2Fa Live to Chrome and keep TOTP verification codes ready at your fingertips whenever you log in.