Phone-Free 2FA

Phone-Free 2FA is a free browser extension that generates TOTP login codes, best suited to people who need them while working at a computer. Its local storage gives users control over their accounts, but recovery and backups are entirely their responsibility.

Overview

The extension creates a fresh six-digit code every 30 seconds and lets users copy it from the browser sidebar. It works with services that use standard TOTP codes, including Microsoft 365, but cannot handle sign-ins that require a push approval. For code-based logins, keeping the authenticator beside the browser can be convenient; for approval-based accounts, it cannot serve as the required second factor.

Account details are encrypted and kept in the browser, and the extension says it sends nothing over the network. That local approach avoids depending on a central service to store accounts, but it also leaves users without a passphrase reset, account recovery or sync between devices. Lose the passphrase and a usable backup, and the stored accounts cannot be recovered through the extension.

Key features

Unlock protection

The Chrome Web Store listing describes AES-256-GCM encryption for secret keys, with a key derived from the master passphrase using PBKDF2 at 600,000 iterations. Users can lock the extension when its sidebar closes or after a chosen period of inactivity. Failed unlock attempts trigger progressively longer delays. Touch ID is available on supported Chrome and Edge devices; Firefox users unlock with their master passphrase.

Backups and migration

Users can export encrypted backups for safekeeping and standard otpauth records for moving accounts to another authenticator. Those exports make migration possible, but the extension does not provide a safety net if a passphrase or backup is lost. Anyone relying on it should keep a usable backup somewhere they can access if the browser or device is unavailable.

Pricing

Phone-Free 2FA is open source and free. Its Free plan costs nothing and includes the browser extension and TOTP accounts. There is no free trial or paid tier described. The plan has no central recovery or sync, so the absence of a subscription does not remove the need to manage backups yourself.

Platforms

The extension is available for Chrome, Edge, Firefox and other Chromium browsers, including Brave. Although the platform listing includes Android, iOS, macOS and Windows, the product’s supported platform details describe browser extensions; it does not sync accounts across devices. Touch ID support is limited to supported Chrome and Edge devices.

Who it's for

Phone-Free 2FA suits individuals who want TOTP codes within reach during computer-based work and are comfortable managing their own credentials and backups. The maker also identifies staff who need codes at a computer without keeping a phone nearby as a potential audience. It is a poor fit for organisations seeking team administration: there is no backend, tenant, administrator account, central recovery, sync or administrative view of users’ accounts. Questions, suggestions, problems and contributions go through the project’s GitHub repository.

Pros and cons

• Pros: Codes are available from the browser sidebar, and standard TOTP support covers services such as Microsoft 365.
• Pros: Encrypted local storage, configurable locking and encrypted backup exports give users control over how they protect and preserve account data.
• Pros: Standard otpauth exports support moving accounts to another authenticator.
• Cons: No passphrase reset or central account recovery means a lost passphrase can lock users out unless they have a usable backup.
• Cons: No multi-device sync requires users to manage access and backups themselves across devices.
• Cons: Push approvals and team administration are unsupported, ruling it out for those sign-in and organisation needs.

Alternatives

For a broader set of authenticator choices, browse Authenticator apps. Readers looking for distraction controls rather than a TOTP tool can compare options in Distraction Blocking Software.

Freedom is a better fit for people seeking app, website or internet blocking, with multi-device sync, custom blocklists and website exceptions on its free plan. Focus Bear suits people who want routines and Pomodoro sessions, though its free Essentials plan limits Pomodoro sessions to 25 minutes, supports up to five websites or apps, and caps routines at three habits and three break activities; it also excludes AI blocking.

Opal is aimed at app blocking on iOS, Android and Mac; its free plan includes one rule, basic timers and soundscapes, and the Today-only Opal Score. Pluckeye is a free option for people who want all of its features across Android, Linux, macOS and Windows.

ScreenZen is another free app, with optional donations supporting the project. AppBlock is an option for readers looking for a freemium blocker across Android, iOS and browser extensions.

Cold Turkey Blocker is a closer fit for website blocking on desktop browsers and macOS or Windows; its free plan includes website exceptions, timed blocks and statistics. Focus Fence is an iOS and macOS option with a free download and in-app purchases.

Verdict

Choose Phone-Free 2FA if you want free TOTP codes in your browser and are willing to protect your passphrase and maintain a usable backup. Its local storage and encrypted exports make it a practical choice for individual, computer-based sign-ins. Look elsewhere if you need push approvals, team controls, central recovery or automatic access across devices.