Authenticator-Extension/Authenticator
Authenticator
Authenticator is a multi-factor authentication manager and browser extension designed to generate and store two-step verification codes directly within a web browser. It functions as an encrypted secret store that produces both time-based and counter-based security codes to protect online account access.
The project distinguishes itself through cross-browser synchronization, replicating authentication accounts across different browser instances using cloud or local backups. It utilizes password-based encryption to protect authentication seeds and provides a synchronization tool to maintain consistent access to secure logins across multiple devices.
The tool covers a broad range of identity management capabilities, including the import of accounts via secret keys or QR code scanning and the export of encrypted account records. It includes comprehensive backup and recovery systems that support interoperable formatting for migrating credentials between different authentication applications.
Administrative controls are available via browser extension policy management to regulate settings across managed devices.
Features
- One-Time Passwords - Generates and manages time-based and counter-based one-time passwords for securing online accounts.
- TOTP Generation Utilities - Produces six-digit security codes using time-based algorithms that rotate at fixed intervals.
- Password-Based Encryption - Protects stored authentication secrets by encrypting them with a user-defined password.
- Browser Data Synchronization - Synchronizes authentication accounts and credentials across different browser installations and devices.
- Browser Sync Storage - Leverages native browser synchronization to mirror authentication accounts across multiple browser instances.
- Browser Storage Persistence - Stores authentication credentials and settings locally within the browser to ensure offline availability.
- Authenticated File Encryptions - Protects stored authentication credentials using authenticated encryption and password-based hashing to prevent unauthorized access.
- Browser-Based MFA Generators - Generates two-step verification codes directly within the browser interface.
- Cross-Device Secret Syncing - Synchronizing authentication accounts across different browser instances to maintain access to secure logins.
- HOTP Implementations - Generates security codes based on a sequential counter that increments with each request.
- Browser-Based Authentications - Handles multi-factor authentication code generation directly within the web browser interface.
- OTP Generators - Implements a browser-based tool for generating TOTP and HOTP verification codes for two-step authentication.
- Multi-Factor Authentication - Functions as a multi-factor authentication manager that stores secret keys and produces verification codes.
- Secret Encryption - Provides a secure store that encrypts authentication seeds locally using a user-defined password.
- Two-Step Verification Generators - Produces both time-based and counter-based security codes for various service providers.
- Cross-Instance Sync Storage - Utilizes browser-managed storage to automatically synchronize authentication data across all signed-in browser instances.
- Backup and Recovery - Recovers stored credentials using backup files, text strings, or QR image screenshots.
- Cloud Storage Exporters - Saves account data to local files or cloud services to ensure persistent access.
- Cloud Storage Synchronization - Automatically synchronizes account backup files to third-party cloud services via linked accounts.
- QR Code Scanning - Converts visual QR code screenshots into secret keys by scanning image data through the browser.
- Encrypted Backups - Exports and imports encrypted account records to prevent data loss when switching devices.
- QR Code Secret Imports - Adds new authentication accounts by scanning QR codes within the browser.
- Encrypted Secret Backups - Implements encrypted secret backups to prevent permanent loss of authentication keys.
- Interoperable Export Formats - Saves account data in a standardized format to enable credential migration between different authentication apps.
- Interoperable Credential Imports - Loads verification accounts from standardized backup formats shared by compatible authentication applications.
