Is TOTP Authenticator - 2FA OTP Code Generator safe?

TOTP Authenticator stores and exports saved authenticator secrets in plaintext.

The extension saves TOTP account names and secret seeds directly in Chrome's synced extension storage without encryption or key wrapping. Its export feature writes those accounts to a JSON file with each secret value unchanged, so the backup contains plaintext authenticator seeds.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.