A lightweight, privacy-focused authenticator application that runs entirely in your web browser. This app loads your tokens locally from a configuration file, completely bypassing web browser security restrictions (CORS) without needing a local web server.
- 100% Local: Runs entirely in your browser with zero external network requests.
- No Server Required: Uses a standard JavaScript file (
keys.js) to load tokens seamlessly. - Privacy-First: Your secret keys never leave your machine.
- Zero Installation: Open and use instantly without installing any software.
Your project folder only needs two files placed together:
index.html— The application interface and code generator.keys.js— The data file storing your account names and secret keys.
Open the keys.js file in any text editor and add your accounts using the exact format below:
const myKeysData = [
{
"name": "Personal Email",
"key": "JBSWY3DPEHPK3PXP"
},
{
"name": "Work GitHub",
"key": "KRUGS4ZANBZWKY3I"
}
];Note: Replace the example values with your actual account names and base32 secret keys.
- Download both
index.htmlandkeys.jsinto the exact same folder on your computer. - Double-click the
index.htmlfile to open it in your preferred web browser. - The app will instantly read your data and start generating your live 6-digit verification codes.
Because your secrets are stored in plain text inside keys.js, anyone with physical or remote access to your computer files can view them.
- Never upload your populated
keys.jsfile to public repositories like GitHub. - Consider keeping this folder inside an encrypted drive or password-protected folder for maximum security.