2FA Authenticator Online
Store 2FA secrets under a master password and generate TOTP codes in your browser — all accounts in one place.
…
About the 2FA Vault
This is a local TOTP code manager for two-factor authentication. All secrets are stored encrypted in your browser's IndexedDB and never sent to a server.
The vault is encrypted with a master password (PBKDF2 600k iterations → AES-GCM 256). Use the export feature for backups — the file is encrypted with the same password.
Security
- •All secrets stay in your browser only — nothing goes to a server.
- •Encryption: PBKDF2-SHA256 (600,000 iterations) + AES-GCM 256.
- •Auto-lock after 5 minutes of inactivity.
- •Export backups regularly. Without the master password, secrets cannot be recovered.
- •Clearing browser history or reinstalling = losing the vault.
Vault vs single-use generator
Use the Vault if you have multiple accounts and need persistent in-browser storage.
Use the generator if you just need a one-off code without saving the secret. /tools/2fa-token-generator/