2faco Browser Extension
Your 2FA codes, on your desktop. Codes sync across all devices signed into your Google account, with optional PIN protection and one-click autofill on login pages.
⬇ Download 2faco Extension (.zip)
~40 KB · Manifest V3 · TOTP (RFC 6238) with WebCrypto — all codes are generated on your device
Install manually
Until the extension is listed on the Chrome Web Store, install it manually. It takes about a minute.
Download 2faco-extension-v1.1.0.zip using the button above.
Extract the zip to a folder on your computer — for example C:\2faco or ~/2faco. Keep this folder: Chrome needs it to run the extension.
Open chrome://extensions in Chrome (or Edge — Edge supports Chrome extensions).
Toggle Developer mode on — it is in the top-right corner of the page.
Click Load unpacked and select the folder you extracted in step 2. The 2faco icon appears in your toolbar.
(Optional) Click the puzzle-piece icon in Chrome’s toolbar and pin the 2faco extension for quick access.
What you can do with it
Synced across devices
Your accounts live in Chrome’s synced storage, so codes are available on every device signed into the same Google account.
Optional PIN lock
Encrypt your secrets with a PIN (AES-256-GCM, key derived with PBKDF2-SHA256, 200k iterations). No PIN, no decryption.
One-click autofill
A green 2faco button appears next to the code field on login pages. Click it and the code is entered for you.
Copy with one click
Every code shows with a live countdown bar. Click a code to copy it, or click to fill it straight into the page.
Add by pasting
Paste any otpauth:// URI or base32 secret, and name each key — e.g. “Personal Gmail” or “Work GitHub”. Supports SHA-1/SHA-256/SHA-512, 6–8 digits and custom periods.
Open standards
Built on RFC 6238 with the WebCrypto API. No external libraries, no analytics, no network calls.
Security & privacy
The extension follows the same privacy-first approach as 2faco.com:
- No accounts, no servers. Secrets are stored in Chrome’s synced storage (tied to your Google account), never on 2faco infrastructure.
- Encrypted at rest (optional). With a PIN set, secrets are stored as AES-256-GCM ciphertext. The PIN is never stored — only a slow-hash verifier — so nobody, including us, can decrypt your secrets without it.
- No tracking. The extension contains no analytics, no telemetry, and makes no network requests.
- Everything is local. Codes are generated on your device with the browser’s WebCrypto API.
Full details in the Privacy Policy.
Getting started
Add your first account by opening the extension and pasting an otpauth:// URI — most services show a QR code in their security settings; use the “can’t scan the QR code” link to reveal the URI or secret. The next time you log in on desktop, the 2faco button appears right next to the code field.
Troubleshooting
- Chrome says the extension was removed / is corrupt: you moved or deleted the extracted folder. Re-extract the zip and click Load unpacked again.
- Chrome asks to remove or reload after an update: click Reload — your accounts are unaffected.
- The autofill button doesn’t appear: some sites use custom widgets. Click the extension icon instead and copy the code manually.
- Codes don’t match your phone: your device clock is out of sync — Chrome usually keeps this accurate automatically.
- Forgot your PIN: the PIN cannot be recovered. Remove the extension data from
chrome://extensions(or Chrome’s sync data) and re-add your accounts.
Updates & the Chrome Web Store
We are working on publishing the extension to the Chrome Web Store, which will make installation one click and updates automatic. Until then, check back here for new versions — the download link always points to the latest release.
Questions or feedback? Contact us.