2FA Auth

About

**English:**

2FA Auth lets you generate secure two-factor authentication (TOTP) codes directly in your browser — no phone or app required.

**Key Features:**
- Generate standard TOTP codes (compatible with Google, GitHub, Microsoft, AWS, etc.)
- Add accounts easily by scanning QR codes (from screenshots or exports) or manual entry
- Live updating codes with countdown timer
- Search your accounts instantly (press / to focus search)
- **Optional strong client-side encryption**: Protect all your secrets with a password using AES-GCM + PBKDF2. Everything happens locally in your browser.
- Export / Import backups (JSON)
- 100% private: No cloud sync, no analytics, no data ever leaves your device
- Clean, modern, dark-mode friendly interface

**Security & Privacy:**
Your 2FA secrets are extremely sensitive. 2FA Auth stores them locally using chrome.storage. When you enable password protection:
- Secrets are encrypted on your device before saving.
- We use modern Web Crypto (PBKDF2 with 250,000 iterations + AES-GCM).
- Your password and keys **never leave your computer**. The developers have zero access to your data.
- If you forget your password, your encrypted secrets are permanently lost — always keep a backup using the Export feature!

This makes 2FA Auth one of the most private and transparent 2FA solutions available for the browser.

**Perfect for:**
- Users who want a desktop/browser 2FA solution
- People who prefer not to use their phone for 2FA
- Anyone who wants local encrypted storage without trusting third-party cloud services

Always keep secure backups of your secrets!

---

**中文：**

2FA Auth 让你直接在浏览器中生成安全的双因素认证（TOTP）验证码 —— 无需手机或额外 App。

**主要功能：**
- 生成标准 TOTP 验证码（兼容 Google、GitHub、Microsoft、AWS 等几乎所有服务）
- 通过扫描二维码（截图或导出文件）或手动输入快速添加账号
- 实时更新验证码 + 倒计时进度环
- 快速搜索账号（按 / 键聚焦搜索框）
- **可选强客户端加密**：使用 AES-GCM + PBKDF2 为所有密钥设置密码保护。全部在浏览器本地完成。
- 支持 JSON 导出 / 导入备份
- 极致隐私：无云端同步、无数据分析、数据永不离开你的设备
- 界面简洁现代，支持深色模式

**安全与隐私：**
2FA 密钥属于极度敏感信息。2FA Auth 仅使用浏览器本地存储（chrome.storage）。开启密码保护后：
- 密钥会在保存前于你的设备上完成加密
- 采用现代 Web Crypto 标准（PBKDF2 25万次迭代 + AES-GCM）
- 你的密码和密钥**永远不会离开电脑**，开发者完全无法访问你的数据
- 如果忘记密码，加密后的密钥将永久无法恢复 —— 请务必使用「导出」功能做好备份！

这让 2FA Auth 成为浏览器中最隐私、透明的双因素认证工具之一。

适合：
- 希望在电脑/浏览器使用 2FA 的用户
- 不想把 2FA 绑定手机的用户
- 追求本地加密存储、不信任第三方云服务的用户

请始终妥善保管你的密钥备份！