All products

Local TOTP authenticator

Generate and manage TOTP codes in your local browser.

2FA Auth is a browser-based authenticator for adding accounts, generating time-based codes and protecting locally stored authentication secrets.

Product profile

2FA Auth

Extension

A focused authenticator extension with QR and manual setup, optional password protection, encrypted local storage and portable JSON backup for user-controlled recovery.

QR or manual setup
Local TOTP generation
Optional password protection

Browser Utilities · IceBear Media

Product overview

Built around a defined operating job

A focused authenticator extension with QR and manual setup, optional password protection, encrypted local storage and portable JSON backup for user-controlled recovery.

Designed for

  • Users who prefer a browser-based authenticator
  • Operators managing approved work accounts
  • Teams documenting secure recovery procedures
  • Users who want local TOTP storage without a mandatory cloud account

Core capabilities

What 2FA Auth helps teams do

Focused capabilities for the product’s real operating scope, without inflated performance claims.

QR or manual setup

Add a supported authenticator account by scanning its QR code or entering the setup details manually.

Local TOTP generation

Generate time-based one-time passwords within the browser extension workflow.

Optional password protection

Add a password layer to help protect access to locally stored authenticator records.

Encrypted local storage

Protect locally stored secrets using PBKDF2 key derivation and AES-GCM encryption.

Backup and recovery

Export and restore supported authenticator data through user-controlled JSON backup files.

No mandatory cloud account

Use the extension without creating a required cloud account for your authenticator records.

How it works

A clear path from context to action

  1. 1

    Add an account

    Scan the service QR code or enter the setup key from a trusted source.

  2. 2

    Protect local access

    Configure optional password protection and follow a secure backup routine.

  3. 3

    Use rotating codes

    Open the extension when a configured service requests its current TOTP code.

Use cases

Where the product fits

Generating TOTP codes for approved personal accounts

Managing two-factor codes for authorized work services

Keeping an encrypted local authenticator workflow

Exporting a protected recovery backup for secure storage

Interface preview

A focused authenticator workspace

The extension keeps account setup, rotating codes and recovery controls in a compact browser surface. This illustration uses Demo Data and contains no authentication secrets.

Illustrative interface
Demo Data

Accounts

Authenticator list

Organize the TOTP accounts configured by the user.

Codes

Rotating TOTP view

Read the current code and its time window locally.

Recovery

Backup controls

Export or restore a user-controlled protected record.

Trust and responsible operation

Important context before use

Security, permissions and responsible-use expectations are part of the product experience—not fine print.

Security and recovery

Authentication secrets are sensitive. IceBear Media cannot view or recover locally encrypted secrets, forgotten passwords or backup files.

  • Keep secure backups before changing devices or browser profiles.
  • Lost passwords may not be recoverable.
  • Store exported backup files in a protected location.
  • Never share QR codes, setup keys or backup files.

FAQ

Questions about 2FA Auth

Concise answers about the product’s scope, access and responsible use.

Where are authenticator secrets stored?

The extension is designed to keep supported authenticator records in local browser storage, with PBKDF2 key derivation and AES-GCM encryption when password protection is used.

Can IceBear Media recover my password or secrets?

No. The developer cannot recover locally encrypted secrets or a forgotten password. Users should maintain secure recovery backups.

How should I store an exported backup?

Treat it as sensitive authentication material. Keep it encrypted or otherwise strongly protected, and never send it through an untrusted channel.

2FA Auth

Continue to the product

Visit the official product destination or contact IceBear Media for the right operating context.