AS Authenticator

AS Authenticator generates two-factor codes in Safari and keeps the secrets in an encrypted vault that never leaves your Mac.

WHAT IT DOES • TOTP, HOTP and Steam Guard codes, with the account for the site you are on shown first. • One click copies a code; the bolt fills it straight into the login field, including split six-box forms. Keyboard shortcuts fill and scan without opening the popup. • Add accounts by dragging a box around the QR code on a page, scanning the whole page, using your camera, choosing an image, pasting a link, or typing a secret. A Google Authenticator export brings in every account at once, and Aegis, 2FAS and Bitwarden files import directly. • Brand icons for well-known services, or an icon of your own. Categories, pins, drag to reorder, search. • English, Spanish, French, German and Portuguese.

HOW IT PROTECTS YOU • The vault is encrypted with AES-256-GCM under a key derived from your master password with Argon2id. Nothing is sent anywhere; there is no account and no server. • Auto-lock after the time you choose, and always when Safari quits. Codes can be hidden until you tap them. • A recovery code for a forgotten password, automatic local backups, and encrypted export.

PERMISSIONS Storage for the vault; access to the current page only when you ask, to read a QR code or fill a code; alarms for locking; clipboard write for copying codes. No host permissions, no content scripts, no analytics, and no network except an optional clock check you turn on yourself.

Discovery signals