4 items
A TOTP authenticator that lives in your browser. Scan a QR code from any page, then fill your one-time codes with a single click. XAuthZee is a Time-based One-Time Password (TOTP / RFC 6238) authenticator that lives inside your browser. It is small, fast, and respects your privacy — all your accounts are stored locally and synced through your browser's own sync infrastructure, never sent to any server we operate. Why XAuthZee Most authenticator apps live on a separate device, which means switching windows to grab a code. XAuthZee puts the codes where you already are — the browser tab that is asking for them. Features Scan any QR on the page. Click the scan button, drag a rectangle over the QR code. XAuthZee reads it, parses the otpauth:// URL, and saves the account. One-click fill. Focus a one-time-code input on any site and XAuthZee shows a small panel with the matching code. Pick it and the code is typed into the page (or copied to the clipboard as a fallback when the site blocks scripting). Host bindings. Bind accounts to specific hostnames so that when you visit, say, github.com, the right code is at the top of the list. Master password (optional). Encrypt your secret keys with a password you choose. The derived key lives in session storage and is cleared when the browser closes. The auto-lock timer (5/15/30/60 minutes or never) and the system's own lock screen both lock the extension immediately. Import / export. Move accounts between devices as JSON. You can also paste a otpauth-migration:// link (Google Authenticator's transfer format) or its QR screenshot. Cross-device sync. Because accounts are stored in chrome.storage.sync, they show up on every Chrome and Edge you sign in to. i18n. English and Simplified Chinese UI; the extension follows the browser's language. FAQ Q: Where are my accounts stored? A: Locally in your browser. If you sign in to a browser account (Google / Microsoft), your browser syncs them to your other devices using its own encrypted sync. The developer never sees them. Q: Does it support HOTP? A: No — only TOTP (RFC 6238). HOTP is rarely used today and is a different security model. Q: Can I import from Google Authenticator? A: Yes. Open the GA transfer-export QR, copy the image, and paste (Cmd+V) it into the XAuthZee import dialog. Or copy the otpauth-migration:// URL string and paste that. Q: What if I forget my master password? A: Reset the extension: open options → security → turn off encryption with the password. If you cannot remember the password, the encrypted secrets are unrecoverable by design — re-add the accounts from their original QR codes.
Aug 5, 2026
rating_count is the Chrome Web Store ratings count, not a written-review count.
Media assets
Screenshots and videos on the listing.
Has promo video
Whether the listing includes at least one video.
Languages
Declared language locales.
Developer website
Listing exposes a developer website URL.
Contact email
Listing exposes a contact email.
Keyword in name
Case-insensitive substring match in the name.
Keyword in description
Case-insensitive substring match in the description.
Keyword occurrences in description
Count of case-insensitive occurrences in the description.
Category user-count percentile
Share of same-category extensions with fewer users (null if unknown).
These are transparent listing completeness / keyword signals, not a prediction of Chrome Web Store search ranking.