Is 2FA Authenticator Guard safe?
2FA Authenticator Guard encrypts no-login TOTP secrets with a hardcoded password stored in the extension code.
In no-login mode, the extension stores encrypted authenticator account secrets in chrome.storage.local while protecting them with the fixed password "999999999" and a stored salt. Someone with access to the browser profile or extension storage can use the bundled code and stored values to decrypt those saved TOTP secrets.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itMara Solutions LLC - no other listings under this identity
Mara Solutions LLC - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.7.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls> and 1 more
Read and change your data on every secure site you visit
https://*/*
See the address and title of every tab you have open
tabs
Show a panel beside the page
sidePanel
Store data in your browser
storage
Sign you in with your Google account
identity
Store an unlimited amount of data in your browser
unlimitedStorage