Is 2FA Authenticator safe?

2FA Authenticator stores authenticator secrets and bypass credentials encrypted with passphrases shipped in the extension.

2FA Authenticator saves authenticator entries and TrustedAuth bypass credentials in Chrome sync storage. The extension encrypts those stored values with fixed AES passphrases that are included in its own JavaScript bundle, so the saved ciphertext can be decrypted using code and keys shipped with the extension.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.