AuthenticatorPlus
A Chrome extension that encrypts your TOTP secrets and stores them in Chrome sync — so your codes follow you to any device, with camera import, migration tools, and one-click copy.
AuthenticatorPlus demo
See encrypted sync storage, account import, and one-click copy in the Chrome extension popup.
Built from scratch
AuthenticatorPlus is an open-source Chrome extension for two-factor authentication codes. The original Authenticator extension stored secrets in plain local storage and only supported marquee QR capture — reinstalling meant losing everything.
AuthenticatorPlus encrypts every TOTP secret with your encryption password and stores the ciphertext in Chrome Storage Sync. Sign in to Chrome on any device and your accounts are there — decrypted locally when you enter your password. Camera scanning, Google Authenticator bulk migration, account search, and one-click copy round out the popup.
What's included
Encrypted sync storage
TOTP secrets are encrypted with AES-GCM using keys derived from your password via PBKDF2, then stored in Chrome Storage Sync. Your codes travel with your Chrome profile to any signed-in device — never as plaintext.
TOTPs on any device
Install the extension on a new laptop or work machine, enter your encryption password, and every account decrypts locally. No separate backup file required for day-to-day use.
Multiple import paths
Add accounts by scanning a QR code with your webcam (html5-qrcode), selecting a QR code on any web page with a marquee tool, or bulk-importing from Google Authenticator via protobuf migration URLs.
One-click copy
Click any account in the popup to copy its current six-digit code to the clipboard. A synced countdown arc shows time remaining before the code refreshes.
How it runs
Manifest V3 service worker extension built with Webpack, Babel, and SCSS. TOTP generation uses otplib with server time sync. Options include backup/restore, drag-and-drop account ordering, and a password strength meter.
Encryption password setup
Set a strong encryption password before adding accounts. A built-in strength meter and generator help you pick something that protects your synced secrets.
Tools we used
Published Chrome extension
- Chrome Extension
- Manifest V3
- JavaScript
- Webpack
- Web Crypto API
- otplib
- html5-qrcode
- Chrome Storage Sync
Chrome extension · Security · Open source · TOTP
Building a browser extension or security product?
We can design and ship Chrome extensions with encrypted storage, sync, and workflows that feel simple enough for everyday use.