Is Jotit - Notes and Reminders safe?

Jotit stores user-entered two-factor authentication secrets in Chrome sync storage without encryption.

When a user saves a 2FA entry, Jotit writes the raw TOTP secret into Chrome sync storage under its 2FA data. The same stored secret is later read back to compute one-time codes and can be copied directly from the extension.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.