Media
3 items
Description
OTPilot Authenticator generates two-factor (2FA) codes, with encrypted cloud backup, host-matched autofill, and security advice. OTPilot Authenticator generates two-factor authentication (2FA) codes right in your browser, so you don't need to reach for your phone to sign in. WHAT'S NEW IN THIS VERSION (8.0.7) • Locking the vault now also clears decrypted codes from pages that are already open. • Dropbox tokens are encrypted with your master-password key, and signing out revokes the old authorization. • Older AES-CBC entries are upgraded to authenticated AES-GCM when you unlock. • Master-password hashing runs in a background worker with no eval or WebAssembly, so the extension uses the strictest content security policy. • Codes now match other authenticator apps for secrets whose length is not a multiple of 8 characters. • The autofill keyboard shortcut works again, and smart filtering matches more sites. • Google Authenticator import keeps non-English account names intact. KEY FEATURES • Standard 2FA codes — time-based (TOTP) and counter-based (HOTP) one-time passwords, compatible with Google, GitHub, AWS, and any service that supports authenticator apps. • Encrypted vault — protect your accounts with a master password. Secrets are encrypted with Argon2id key derivation and AES-GCM, and the vault auto-locks after a set idle time. • Host-matched autofill — fill the current code into the matching site's login field with one shortcut. Codes are only injected when the page's host matches the saved account. • Encrypted cloud backup (optional) — back up your encrypted vault to your own Dropbox. Backups stay encrypted; only you can decrypt them with your master password. • Easy import — scan a QR code, enter a key manually, or import from Google Authenticator. • Security Advisor — surfaces practical tips to keep your 2FA setup safe. PRIVACY Your 2FA secrets never leave your device unencrypted. OTPilot does not run analytics and does not send your data to its developer. Cloud backup is opt-in and goes only to your own cloud account. Open source — built on the Authenticator extension.