Standard 6-digit TOTP codes, with support for 6 to 8 digits when a service asks.
Chrome & Edge extension
Local by Default
Encrypted SecretsPrivacy First
LocalBox2FA is a local-first two-factor authenticator for Chrome and Edge that keeps your TOTP codes in your own browser instead of on someone else's server. Open the popup, read the current code and paste it into the site that asks for it. Accounts stay on your device and nothing is uploaded unless you deliberately turn on encrypted sync. No account to create, no ads, no tracking. It is for anyone who wants a browser authenticator without handing their second factor to a cloud service.
Runs locallyNo trackingChrome & Edge
Free + Premium · Chrome & Edge
01
Everything it does
The core features at a glance.
SHA-1, SHA-256 or SHA-512 and a custom refresh period for services that do not use the defaults.
A live countdown shows how long the current code is valid.
One click copies a code; the clipboard clears itself after 30 seconds.
Save, search, rename and delete accounts, with duplicate protection before a secret is saved twice.
QR codes stay hidden until you reveal them, behind a warning that the code contains the secret.
Also included
- An optional master password seals saved secrets on this device.
- Auto-lock after 1, 5 or 15 minutes idle; closing the popup always clears the key.
02
Free vs Premium
The free tier is a complete tool, not a trial. Premium is optional.
Free
every local feature — unlimited accounts, 6 to 8 digit TOTP, SHA-1, SHA-256 and SHA-512, custom periods, live countdown, one-click copy with 30-second clearing, search, rename, delete, duplicate protection, QR reveal, optional master password, auto-lock, text and encrypted .lb2fa export, every import format, clear-all, dark mode and six languages. Export, import and clear-all are not licence-gated.
Premium
encrypted cross-device sync only. One licence key activates on two browsers; removing it from one browser frees that slot again. Without a licence, everything else keeps working offline.
Private by design
Your data stays on your device. No account, no analytics, no tracking. Read exactly what is stored and when the extension uses the network.
Local processingNo accountOptional licence
Read the privacy policy
Support the developer
💌 A Note to You
Thank you for using LocalBox2FA. I built this tool because I wanted a truly secure 2FA authenticator — no registration, local by default, and even optional sync only ever uploads sealed secrets; your master password never leaves the device.
If it helps you too, that's already the best reward I could ask for.
Of course, if you'd like to ☕ buy me a coffee, it would truly make my day — and keep me motivated to make LocalBox2FA even better.
Sponsorship is voluntary and does not affect any functionality. It is not tied to extension features — purely a gesture of support.