GAuth Authenticator

This application generates TOTP tokens for multi-factor authentication used by Google, Dropbox, Amazon and many others.

GAuth Authenticator: Chrome Extension for TOTP Token Generation

GAuth Authenticator is a simple yet effective Chrome extension designed to generate TOTP tokens for multi-factor authentication. This extension works seamlessly with your Google account and other platforms like Dropbox, Amazon, and Dreamhost, implementing RFC4226 (HMAC-based OTP). Besides securing your GMail account, it is also a brilliant tool for enhancing your SSH connection's security. All token secrets are securely stored locally, ensuring no data transmission occurs. An open-source application that encourages collaborative improvements with its source code available online.
Install from Chrome Web Store

Extension stats

Users: 100,000+
Rating: 3.30
(216)
Version: 35.8 (Last updated: 2015-01-26)
Creation date: 2015-01-25
Risk impact: Very low risk impact
Risk likelihood:
Manifest version: 2
Size: 297.98K
URLs: Website

Other platforms

Not available on Android
Not available on Firefox
Not available on Edge
Want to check extension ranking and stats more quickly for other Chrome extensions? Install Chrome-Stats extension to view Chrome-Stats data as you browse the Chrome Web Store.

Extension summary

A simple application which generates TOTP tokens when multi-factor authentication is used with your Google account. It implements RFC4226 (HMAC-based OTP) and has been tested to work with Google Authenticator, Dropbox, Dreamhost and Amazon.

Not just to secure your GMail account, but also extremely helpful to tighten the security of your SSH connection as instructed at http://www.mnxsolutions.com/security/two-factor-ssh-with-google-authenticator.html

Instructions: Enter the secret you have been given by the service for which you want to have the OTP generated. Acccount name is whatever you want to remind your secret by, eg. the site name or email address. The generated 6 character key is the response you will need to enter when asked for. Be aware the time on your desktop or phone should be synchronized. When this is off by a minute it could fail to login.

If you are using Google, do not use an application-specific passwords to generate a response. They are not meant to be used this way.

Please let me know about any problems before you make a review in the store since I cannot answer you there. Send a report email or report the support page. You can find the contact info in the about dialog or navigate to the support page.

No data is transmitted. All token secrets are stored locally in localStorage. Online version available at http://gauth.apps.gbraad.nl Community created application. Not affiliated with Google. Source code is available at http://github.com/gbraad/gauth/

Have you got some idea? Share it with me. Consider a donation if you find this software useful.

User reviews

These summaries are automatically generated weekly using AI based on recent user reviews. Chrome Web Store does not verify user reviews, so some user reviews may be inaccurate, spammy, or outdated.
Pros
  • Easy to use
  • Works correctly with standard TOTP algorithm
  • Useful when phone is not accessible
  • Functional user interface
Cons
  • No syncing or import support for existing 2FAs
  • No documentation available
  • Potential security issues with storing keys in plain text
  • Reports of spam after installation
  • Randomly stops working for some users
Most mentioned
  • No syncing
  • No import support
  • Spam issues
  • Inconsistent functionality
User reviews
you cant sync :V useless i cant sync my school google acc those who give positive reviews is bunch of liars heck thats why this authenticator only have 100k no use at all

Cannot import anything. No scanning support. Pointless
by Maruthi Janardhan, 2024-01-15

No documentation. No syncing, so can't import my existing 2FAs. Appears to only be useful if setting up a new 2FA - given I've already put all my 'at risk' accounts onto 2FA, makes this useless.
by Richard Davies, 2023-08-30
View all user reviews

Extension safety

Risk impact

GAuth Authenticator does not require any sensitive permissions.

Risk likelihood

GAuth Authenticator has earned a fairly good reputation and likely can be trusted.

Upgrade to see risk analysis details

Promo images

GAuth Authenticator small promo image
Small promo image

Similar extensions

Here are some Chrome extensions that are similar to GAuth Authenticator: