Phone-Free 2FA

Phone-Free 2FA is a browser-side authenticator for standard TOTP codes, aimed at people who sign in from a computer and want their second factor close at hand. Its local storage and encrypted exports offer control without a service account, but recovery and device migration depend on the user.

Overview

The extension produces a six-digit code every 30 seconds and lets you copy it from the browser sidebar. It works with services that accept standard TOTP, including Microsoft 365, but cannot handle push-approval requests. Choose it for code-based sign-ins, not accounts that require tapping an approval notification.

Account details are encrypted and kept in the browser; the extension says it sends nothing over the network. That design avoids a backend holding account data, but also means no central passphrase reset, account recovery, or cross-device sync. If you lose access to the passphrase and have no usable backup, the extension cannot restore the accounts.

Key features

Local protection

The Chrome Web Store listing describes AES-256-GCM encryption for secret keys, with a key derived from the master passphrase using PBKDF2 at 600,000 iterations. You can set the extension to lock when the sidebar closes or after configurable inactivity; failed unlock attempts trigger progressively longer delays. Touch ID is supported on compatible Chrome and Edge devices, while Firefox requires the master passphrase. These controls make the browser a practical place to retrieve codes, but they do not replace a backup if the passphrase becomes unavailable.

Backups and portability

Encrypted backups let you preserve a protected copy, while standard otpauth exports let you move accounts to another authenticator. Those options are important because there is no sync or central recovery: keep a backup somewhere you can reach if the browser or device is lost, and make sure you can unlock it. The project has no administrator view or organisation-level account management, so it is not a centrally managed workforce authenticator.

Pricing

Phone-Free 2FA is free and open source. The Free plan costs nothing and includes the browser extension and TOTP accounts, with no central recovery or sync. There is no free trial because the product is free; there are no paid tiers, seat charges, or stated account quotas to weigh against the recovery trade-off.

Platforms

Phone-Free 2FA is a browser extension for Chrome, Edge, Firefox, and other Chromium browsers, including Brave. The project’s platform tags also include Android, iOS, macOS, and Windows, but the supported browser list is the relevant way to choose where to install the extension. Touch ID is available on supported Chrome and Edge devices; Firefox users unlock with the master passphrase.

Who it's for

This is a sensible fit for individuals and staff who do computer-based work, use standard TOTP sign-ins, and prefer not to keep a phone beside the computer. It also suits people comfortable maintaining their own encrypted backup. Avoid it if you need push approvals, seamless access across devices, administrator oversight, or a recovery route when a passphrase is lost. The maker directs questions, suggestions, problems, and contributions to the project’s GitHub repository.

Pros and cons

• Pros: Codes are available in the browser sidebar, avoiding a phone lookup during computer-based sign-ins.
• Pros: Encrypted local storage and the extension’s claim that it sends nothing over the network suit users who want account data kept out of a service backend.
• Pros: Encrypted backups and otpauth exports provide ways to preserve or move accounts without relying on sync.
• Cons: No central recovery or passphrase reset leaves users responsible for keeping a usable backup.
• Cons: No cross-device sync means the extension is less convenient for people who regularly switch devices.
• Cons: It generates TOTP codes only; push-approval sign-ins are outside its scope.
• Cons: No administrative account or view makes it unsuitable for organisations that need central management.

Alternatives

For a broader set of authenticators, see Authenticator apps. If your goal is limiting distractions rather than generating login codes, compare Distraction Blocking Software and these options:

• Freedom is the better fit if you want app, website, or internet blocking across Android, iOS, Linux, macOS, web, and Windows, with multi-device sync and custom blocklists in its free plan.
• Focus Bear suits users who want routines alongside blocking; its free Essentials plan limits Pomodoro sessions to 25 minutes, blocks up to five websites or apps, and caps habits and break activities.
• Pluckeye is another free option if you want all its features at no charge, with support for Android, Linux, macOS, and Windows.
• Opal is worth considering for basic app blocking on iOS, Android, or Mac; its free plan includes one rule, basic timers and soundscapes, and a daily Opal Score.
• ScreenZen offers a free core app with optional donations and supports Android, iOS, macOS, and Windows.
• Focuser is a free, open-source blocker for people who want an extension or a desktop option on Linux, macOS, or Windows.
• AppBlock is a freemium alternative available on Android, iOS, and as an extension.
• Cold Turkey Blocker has a free plan with website blocking, exceptions, timed blocks, and statistics for extension, macOS, and Windows users.

Verdict

Choose Phone-Free 2FA if you want standard TOTP codes in your browser and are willing to protect your own backup. Its local-first approach keeps retrieval simple without sending account data over the network, but the lack of recovery and sync is the deciding reason to look elsewhere if you need resilience across devices or help regaining access.