AS Authenticator 作者： Ayala Solutions
Two-factor authenticator. TOTP and HOTP codes from an encrypted vault that never leaves your browser.
扩展元数据
屏幕截图
关于此扩展
AS Authenticator generates two-factor authentication (2FA) codes directly in Firefox while keeping your secrets protected in an encrypted vault that never leaves your browser.
No account. No server. No analytics.
Add accounts using several methods:
- Scan a QR code directly from a webpage.
- Select an area of the page containing a QR code.
- Scan using your camera.
- Import a QR code from an image.
- Scan a QR code image you copied from a page (one click, or Ctrl+V).
- In Firefox, choosing a file opens the extension in a tab first.
- Paste an
- Enter a secret manually.
- Import multiple accounts from Google Authenticator exports.
- Import accounts from Aegis, 2FAS, and Bitwarden files.
Keep large authenticator collections manageable with:
- Brand icons for well-known services.
- Custom account icons.
- Categories.
- Pinned accounts.
- Drag-and-drop reordering.
- Fast account search.
AS Authenticator supports:
English • Spanish • French • German • Portuguese
Your authentication secrets stay under your control.
- Vault encryption using AES-256-GCM.
- Master-password key derivation using Argon2id.
- Secrets are stored locally in your browser.
- No AS Authenticator account required.
- No AS Authenticator server.
- No analytics or tracking.
- Automatic vault locking.
- Lock when your screen locks.
- Lock after a configurable period of inactivity.
- Option to hide authentication codes.
- Automatically clear copied codes from the clipboard.
- Recovery code support for a forgotten master password.
- Automatic local backups.
- Encrypted vault export.
AS Authenticator can optionally synchronize your encrypted vault between your own Firefox browsers using Firefox Sync.
Sync is disabled by default and must be explicitly enabled by you.
AS Authenticator requests only the permissions needed for its features:
Storage
Stores your encrypted authenticator vault and settings.
Active Tab & Scripting
Allows AS Authenticator to scan QR codes or fill authentication codes on the page you're currently using — only when you request it.
Alarms & Idle
Supports automatic and inactivity-based vault locking.
Clipboard Write
Allows one-click code copying and automatic clipboard clearing afterward.
Clipboard Read
Reads the clipboard only when you click "Scan the copied QR code" on the Add tab, to decode a QR code image you copied from a page (right-click, Copy image). The image is decoded on your computer; the clipboard is not read at any other time.
AS Authenticator uses no persistent host permissions, no always-running content scripts, and no analytics.
Network access is not required for normal operation. The extension makes only two kinds of request on its own: an optional clock check (timeapi.io) that you enable yourself, and an HTTPS load of a site's own favicon.ico for an account's icon when no bundled brand icon matches.
AS Authenticator • Ayala Solutions • Authenticator • 2FA • TOTP • MFA • OTP • Two-Factor Authentication • HOTP • QR Code • Security • Privacy • Google Authenticator • Microsoft Authenticator • One-Time Password • Steam Guard
No account. No server. No analytics.
- Generate TOTP, HOTP, and Steam Guard authentication codes.
- Automatically prioritize the account associated with the website you're visiting.
- Copy a code with one click.
- Fill authentication codes directly into login fields, including split six-box verification forms.
- Use keyboard shortcuts to fill or scan without opening the extension popup.
Add accounts using several methods:
- Scan a QR code directly from a webpage.
- Select an area of the page containing a QR code.
- Scan using your camera.
- Import a QR code from an image.
- Scan a QR code image you copied from a page (one click, or Ctrl+V).
- In Firefox, choosing a file opens the extension in a tab first.
- Paste an
otpauth:// link.- Enter a secret manually.
- Import multiple accounts from Google Authenticator exports.
- Import accounts from Aegis, 2FAS, and Bitwarden files.
Keep large authenticator collections manageable with:
- Brand icons for well-known services.
- Custom account icons.
- Categories.
- Pinned accounts.
- Drag-and-drop reordering.
- Fast account search.
AS Authenticator supports:
English • Spanish • French • German • Portuguese
Your authentication secrets stay under your control.
- Vault encryption using AES-256-GCM.
- Master-password key derivation using Argon2id.
- Secrets are stored locally in your browser.
- No AS Authenticator account required.
- No AS Authenticator server.
- No analytics or tracking.
- Automatic vault locking.
- Lock when your screen locks.
- Lock after a configurable period of inactivity.
- Option to hide authentication codes.
- Automatically clear copied codes from the clipboard.
- Recovery code support for a forgotten master password.
- Automatic local backups.
- Encrypted vault export.
AS Authenticator can optionally synchronize your encrypted vault between your own Firefox browsers using Firefox Sync.
Sync is disabled by default and must be explicitly enabled by you.
AS Authenticator requests only the permissions needed for its features:
Storage
Stores your encrypted authenticator vault and settings.
Active Tab & Scripting
Allows AS Authenticator to scan QR codes or fill authentication codes on the page you're currently using — only when you request it.
Alarms & Idle
Supports automatic and inactivity-based vault locking.
Clipboard Write
Allows one-click code copying and automatic clipboard clearing afterward.
Clipboard Read
Reads the clipboard only when you click "Scan the copied QR code" on the Add tab, to decode a QR code image you copied from a page (right-click, Copy image). The image is decoded on your computer; the clipboard is not read at any other time.
AS Authenticator uses no persistent host permissions, no always-running content scripts, and no analytics.
Network access is not required for normal operation. The extension makes only two kinds of request on its own: an optional clock check (timeapi.io) that you enable yourself, and an HTTPS load of a site's own favicon.ico for an account's icon when no bundled brand icon matches.
AS Authenticator • Ayala Solutions • Authenticator • 2FA • TOTP • MFA • OTP • Two-Factor Authentication • HOTP • QR Code • Security • Privacy • Google Authenticator • Microsoft Authenticator • One-Time Password • Steam Guard
评分 5（1 位用户）
权限与数据
更多信息
Firefox specifics: "Sync across your browsers" uses Firefox Sync's add-on storage, so it needs a Mozilla account with add-on sync enabled on each browser, and the same master password on each. Keyboard shortcuts (fill the code, select a QR code on the page) can be changed under Manage Your Extensions, gear menu, Manage Extension Shortcuts. Account icons come from the bundled brand marks; Firefox has no favicon cache the extension can read.
The privacy policy, security policy, vault format and security audit report are published at https://github.com/hov172/as-authenticator-docs. Report bugs at https://github.com/hov172/as-authenticator-docs/issues. Security reports: see SECURITY.md there.
Releases are reproducible builds: the source is submitted to Mozilla with every version, and reviewers can rebuild the exact file.