GAuth Authenticator: Chrome Extension for TOTP Token Generation
Extension stats
Other platforms
Extension summary
A simple application which generates TOTP tokens when multi-factor authentication is used with your Google account. It implements RFC4226 (HMAC-based OTP) and has been tested to work with Google Authenticator, Dropbox, Dreamhost and Amazon.
Not just to secure your GMail account, but also extremely helpful to tighten the security of your SSH connection as instructed at http://www.mnxsolutions.com/security/two-factor-ssh-with-google-authenticator.html
Instructions: Enter the secret you have been given by the service for which you want to have the OTP generated. Acccount name is whatever you want to remind your secret by, eg. the site name or email address. The generated 6 character key is the response you will need to enter when asked for. Be aware the time on your desktop or phone should be synchronized. When this is off by a minute it could fail to login.
If you are using Google, do not use an application-specific passwords to generate a response. They are not meant to be used this way.
Please let me know about any problems before you make a review in the store since I cannot answer you there. Send a report email or report the support page. You can find the contact info in the about dialog or navigate to the support page.
No data is transmitted. All token secrets are stored locally in localStorage. Online version available at http://gauth.apps.gbraad.nl Community created application. Not affiliated with Google. Source code is available at http://github.com/gbraad/gauth/
Have you got some idea? Share it with me. Consider a donation if you find this software useful.
User reviews
- Easy to use
- Works correctly with standard TOTP algorithm
- Useful when phone is not accessible
- Functional user interface
- No syncing or import support for existing 2FAs
- No documentation available
- Potential security issues with storing keys in plain text
- Reports of spam after installation
- Randomly stops working for some users
- No syncing
- No import support
- Spam issues
- Inconsistent functionality
User reviews
Extension safety
Risk impact
GAuth Authenticator does not require any sensitive permissions.
Risk likelihood
GAuth Authenticator has earned a fairly good reputation and likely can be trusted.
Promo images
Similar extensions
Here are some Chrome extensions that are similar to GAuth Authenticator: