AS Authenticator generates two-factor authentication (2FA) codes directly in Firefox while keeping your secrets protected in an encrypted vault that never leaves your browser. No account. No server. No analytics.

Generate TOTP, HOTP, and Steam Guard authentication codes.
Automatically prioritize the account associated with the website you're visiting.
Copy a code with one click.
Fill authentication codes directly into login fields, including split six-box verification forms.
Use keyboard shortcuts to fill or scan without opening the extension popup.

Add accounts using several methods: - Scan a QR code directly from a webpage. - Select an area of the page containing a QR code. - Scan using your camera. - Import a QR code from an image. - Scan a QR code image you copied from a page (one click, or Ctrl+V). - In Firefox, choosing a file opens the extension in a tab first. - Paste an otpauth:// link. - Enter a secret manually. - Import multiple accounts from Google Authenticator exports. - Import accounts from Aegis, 2FAS, and Bitwarden files. Keep large authenticator collections manageable with: - Brand icons for well-known services. - Custom account icons. - Categories. - Pinned accounts. - Drag-and-drop reordering. - Fast account search. AS Authenticator supports: English • Spanish • French • German • Portuguese Your authentication secrets stay under your control. - Vault encryption using AES-256-GCM. - Master-password key derivation using Argon2id. - Secrets are stored locally in your browser. - No AS Authenticator account required. - No AS Authenticator server. - No analytics or tracking. - Automatic vault locking. - Lock when your screen locks. - Lock after a configurable period of inactivity. - Option to hide authentication codes. - Automatically clear copied codes from the clipboard. - Recovery code support for a forgotten master password. - Automatic local backups. - Encrypted vault export. AS Authenticator can optionally synchronize your encrypted vault between your own Firefox browsers using Firefox Sync. Sync is disabled by default and must be explicitly enabled by you. AS Authenticator requests only the permissions needed for its features: Storage Stores your encrypted authenticator vault and settings. Active Tab & Scripting Allows AS Authenticator to scan QR codes or fill authentication codes on the page you're currently using — only when you request it. Alarms & Idle Supports automatic and inactivity-based vault locking. Clipboard Write Allows one-click code copying and automatic clipboard clearing afterward. Clipboard Read Reads the clipboard only when you click "Scan the copied QR code" on the Add tab, to decode a QR code image you copied from a page (right-click, Copy image). The image is decoded on your computer; the clipboard is not read at any other time. AS Authenticator uses no persistent host permissions, no always-running content scripts, and no analytics. Network access is not required for normal operation. The extension makes only two kinds of request on its own: an optional clock check (timeapi.io) that you enable yourself, and an HTTPS load of a site's own favicon.ico for an account's icon when no bundled brand icon matches. AS Authenticator • Ayala Solutions • Authenticator • 2FA • TOTP • MFA • OTP • Two-Factor Authentication • HOTP • QR Code • Security • Privacy • Google Authenticator • Microsoft Authenticator • One-Time Password • Steam Guard

Latest version

Version 0.14.6

Older versions

Version 0.14.5

Version 0.14.4

Version 0.14.3

Version 0.14.2