Authenticator-Extension/Authenticator
Authenticator
Authenticator es un gestor de autenticación de múltiples factores y extensión de navegador diseñado para generar y almacenar códigos de verificación de dos pasos directamente dentro de un navegador web. Funciona como un almacén de secretos cifrado que produce códigos de seguridad basados tanto en tiempo como en contador para proteger el acceso a cuentas en línea.
El proyecto se distingue por la sincronización entre navegadores, replicando cuentas de autenticación a través de diferentes instancias de navegador utilizando copias de seguridad en la nube o locales. Utiliza cifrado basado en contraseña para proteger las semillas de autenticación y proporciona una herramienta de sincronización para mantener un acceso consistente a inicios de sesión seguros a través de múltiples dispositivos.
La herramienta cubre una amplia gama de capacidades de gestión de identidad, incluyendo la importación de cuentas mediante claves secretas o escaneo de códigos QR y la exportación de registros de cuentas cifrados. Incluye sistemas integrales de copia de seguridad y recuperación que soportan formatos interoperables para migrar credenciales entre diferentes aplicaciones de autenticación.
Los controles administrativos están disponibles a través de la gestión de políticas de extensión del navegador para regular la configuración en dispositivos gestionados.
Features
- One-Time Passwords - Generates and manages time-based and counter-based one-time passwords for securing online accounts.
- TOTP Generation Utilities - Produces six-digit security codes using time-based algorithms that rotate at fixed intervals.
- Password-Based Encryption - Protects stored authentication secrets by encrypting them with a user-defined password.
- Browser Data Synchronization - Synchronizes authentication accounts and credentials across different browser installations and devices.
- Browser Sync Storage - Leverages native browser synchronization to mirror authentication accounts across multiple browser instances.
- Browser Storage Persistence - Stores authentication credentials and settings locally within the browser to ensure offline availability.
- Authenticated File Encryptions - Protects stored authentication credentials using authenticated encryption and password-based hashing to prevent unauthorized access.
- Browser-Based MFA Generators - Generates two-step verification codes directly within the browser interface.
- Cross-Device Secret Syncing - Synchronizing authentication accounts across different browser instances to maintain access to secure logins.
- HOTP Implementations - Generates security codes based on a sequential counter that increments with each request.
- Browser-Based Authentications - Handles multi-factor authentication code generation directly within the web browser interface.
- OTP Generators - Implements a browser-based tool for generating TOTP and HOTP verification codes for two-step authentication.
- Multi-Factor Authentication - Functions as a multi-factor authentication manager that stores secret keys and produces verification codes.
- Secret Encryption - Provides a secure store that encrypts authentication seeds locally using a user-defined password.
- Two-Step Verification Generators - Produces both time-based and counter-based security codes for various service providers.
- Cross-Instance Sync Storage - Utilizes browser-managed storage to automatically synchronize authentication data across all signed-in browser instances.
- Backup and Recovery - Recovers stored credentials using backup files, text strings, or QR image screenshots.
- Cloud Storage Exporters - Saves account data to local files or cloud services to ensure persistent access.
- Cloud Storage Synchronization - Automatically synchronizes account backup files to third-party cloud services via linked accounts.
- QR Code Scanning - Converts visual QR code screenshots into secret keys by scanning image data through the browser.
- Encrypted Backups - Exports and imports encrypted account records to prevent data loss when switching devices.
- QR Code Secret Imports - Adds new authentication accounts by scanning QR codes within the browser.
- Encrypted Secret Backups - Implements encrypted secret backups to prevent permanent loss of authentication keys.
- Interoperable Export Formats - Saves account data in a standardized format to enable credential migration between different authentication apps.
- Interoperable Credential Imports - Loads verification accounts from standardized backup formats shared by compatible authentication applications.
