2faco Browser Extension
Your 2FA codes, on your desktop. Codes sync across all devices signed into your Google account, with optional PIN protection and one-click autofill on login pages.
⬇ Download 2faco Extension (.zip)
~45 KB · Manifest V3 · TOTP (RFC 6238) with WebCrypto — all codes are generated on your device
Install manually
Until the extension is listed on the Chrome Web Store, install it manually. It takes about a minute.
Download 2faco-extension-v2.0.1.zip using the button above.
Extract the zip to a folder on your computer — for example C:\2faco or ~/2faco. Keep this folder: Chrome needs it to run the extension.
Open chrome://extensions in Chrome (or Edge — Edge supports Chrome extensions).
Toggle Developer mode on — it is in the top-right corner of the page.
Click Load unpacked and select the folder you extracted in step 2. The 2faco icon appears in your toolbar.
(Optional) Click the puzzle-piece icon in Chrome’s toolbar and pin the 2faco extension for quick access.
What you can do with it
Synced across devices
Your accounts live in Chrome’s synced storage, so codes are available on every device signed into the same Google account.
Optional PIN lock
Encrypt your secrets with a PIN (AES-256-GCM, key derived with PBKDF2-SHA256, 200k iterations). No PIN, no decryption.
One-click autofill
A green 2faco button appears next to the code field on login pages. Click it and the code is entered for you.
Copy with one click
Every code shows with a live countdown bar. Click a code to copy it, or click to fill it straight into the page.
Add by pasting
Paste any otpauth:// URI (from a QR scan or setup page) or base32 secret, and name each key — e.g. “Personal Gmail” or “Work GitHub”. Supports SHA-1/SHA-256/SHA-512, 6–8 digits and custom periods.
Groups & labels
Tag accounts with an optional group like “Work” — shown as a badge on each code and carried through export/import.
System, Light & Dark themes
A polished glassmorphism redesign. Follows your operating system by default, with an easy toggle in settings.
Full options page
Set the auto-lock timer, autofill, theme and default code settings (algorithm, digits, period) — or export/import a backup — all from one settings page.
First-run wizard
A short welcome flow gets new users from first open to their first added key in seconds.
Search & filter
Find accounts instantly with real-time search. Filter by name, issuer, or email address.
Import & export
Backup all accounts to a secure JSON file. Restore on any device or after a fresh install.
Brute-force protection
PIN attempts are limited to 5, with a 5-minute lockout after max failures. Keeps your accounts safe.
Reorder accounts
Move accounts up or down to organize your list the way you want it.
Open standards
Built on RFC 6238 with the WebCrypto API. No external libraries, no analytics, no network calls.
Security & privacy
The extension follows the same privacy-first approach as 2faco.com:
- No accounts, no servers. Secrets are stored in Chrome’s synced storage (tied to your Google account), never on 2faco infrastructure.
- Encrypted at rest (optional). With a PIN set, secrets are stored as AES-256-GCM ciphertext. The PIN is never stored — only a slow-hash verifier — so nobody, including us, can decrypt your secrets without it.
- No tracking. The extension contains no analytics, no telemetry, and makes no network requests.
- Everything is local. Codes are generated on your device with the browser’s WebCrypto API.
Full details in the Privacy Policy.
Getting started
Add your first account by opening the extension and pasting an otpauth:// URI — most services show a QR code in their security settings; use the “can’t scan the QR code” link to reveal the URI or secret. The next time you log in on desktop, the 2faco button appears right next to the code field.
Troubleshooting
- Chrome says the extension was removed / is corrupt: you moved or deleted the extracted folder. Re-extract the zip and click Load unpacked again.
- Chrome asks to remove or reload after an update: click Reload — your accounts are unaffected.
- The autofill button doesn’t appear: some sites use custom widgets. Click the extension icon instead and copy the code manually.
- Codes don’t match your phone: your device clock is out of sync — Chrome usually keeps this accurate automatically.
- Forgot your PIN: the PIN cannot be recovered. Remove the extension data from
chrome://extensions(or Chrome’s sync data) and re-add your accounts.
Version history
Every release stays downloadable — older versions remain available below. All versions are Manifest V3 and use the same account data format, so moving between them is safe.
- 2.0.1 (latest) — 2faco-extension-v2.0.1.zip. Critical fix: unlock and PIN setup no longer throw
InvalidAccessError(key extractability corrected). Also removed a console error caused by anunloadlistener in the autofill content script. - 2.0.0 — 2faco-extension-v2.0.0.zip. Glassmorphism redesign with System/Light/Dark themes, new options page (auto-lock, defaults, backup), first-run onboarding wizard, account groups, backup reminder, faster batch decrypt, and a list refresh that only updates changed codes.
- 1.3.0 — 2faco-extension-v1.3.0.zip. Full import/export system with an encrypted backup format, duplicate detection, and re-encryption on import.
- 1.1.0 — 2faco-extension-v1.1.0.zip. Account nicknames when adding keys.
- 1.0.0 — 2faco-extension-v1.0.0.zip. Initial release.
Updates & the Chrome Web Store
We are working on publishing the extension to the Chrome Web Store, which will make installation one click and updates automatic. Until then, check back here for new versions — the download link always points to the latest release.
Questions or feedback? Contact us.