Merlin
Open Two-Factor Authenticator

Open Two-Factor Authenticator

An open-source two-factor Time-based One-Time Password (TOTP) authenticator with SHA-256 secure storage

  • Open Two-Factor Authenticator
  • Open Two-Factor Authenticator
What is Open Two-Factor Authenticator?
Open Two-Factor Authenticator is a security-focused Edge add-on. It offers an encrypted, open-source two-factor TOTP authentication solution, providing secure storage of keys using AES-CBC encryption. It syncs data across devices using browser-synced storage, building an extra layer of protection. It neither stores passwords nor performs server-side activities, adding to user privacy and security. The add-on is compatible with multiple browsers.
Download
Merlin
Stats
By: Bermet
Users: 5,214 ▲ 6
Rating: 4.00 (3)
Version: 0.3.0 (Last updated: 2021-09-06)
Creation date: 2021-09-06
Risk impact: Low risk impact
Risk likelihood: Low risk likelihood
Manifest version: 3
Permissions:
  • storage
  • notifications
Size: 261.80K
Stats date:

Chrome-Stats Rank

# 2142 ▲ 7
Other rankings
Upgrade to see more rankings

Other platforms

Open Two-Factor Authenticator
Open Two-Factor Authenticator (v0.3.1)
3.20 (10) 10,000
Not available on Firefox
Want to check extension ranking and stats more quickly for other Edge add-ons? Install Chrome-Stats extension to view Chrome-Stats data as you browse the Edge Add-on Store.
Chrome-Stats extension
Merlin
Summary
Analyze keywords

Open Two-Factor Authenticator aims to provide an open-source two-factor authentication to browsers and Android devices with synced storage.

By using this extension, you can have your encrypted keys stored in the browser's synced storage. This allows you to sync them across multiple devices. This extension uses the public key/private key method to encrypt stored data (SHA-256).

Currently, Open Two-Factor Authenticator supports Firefox on Desktop, Firefox on Android, Chrome, Edge, and Opera browsers. Standalone Android implantation is still in progress.

Features:

  1. Stores secrets securely using AES-CBC encryption.
  2. Does not store passwords
  3. Does not have any server-side activities whatsoever
  4. Uses synced storage, so secrets are securely shared between multiple devices.
  5. Supports custom number of digits and custom validation period
Safety
Risk impact

Open Two-Factor Authenticator is relatively safe to use as it requires very minimum permissions.

Risk likelihood

Open Two-Factor Authenticator has earned a fairly good reputation and likely can be trusted.

Upgrade to see risk analysis details