Autofill your 2FA codes in Chrome

How it works

1. Save the account: OTPilot detects the 2FA setup QR code on the page, or you paste the setup key, or import from Google Authenticator (imported accounts are linked to their site the first time you use Fill Page there).
2. Sign in: OTPilot offers your saved login in the username field and fills the password.
3. The code field appears: OTPilot fills the current code and submits the form.
4. Several accounts on that site? Pick one in the prompt. Vault locked? Unlock it right on the page.

Email codes too

Some sites send the code by email. OTPilot reads it from an open Gmail, Outlook, Yahoo Mail, Proton Mail, Fastmail or Zoho Mail tab and fills it in. The email is read only on your device and never sent anywhere; you can turn it off in Settings.

Built to stay out of the way

• Only on the right site. A code is filled only on the sites you saved it for, never on a lookalike domain.
• Sites that block automatic submit. Some sites reject a form submitted by an extension. OTPilot notices, and on those sites fills the code and leaves the final click to you.
• Works offline. Codes are generated on your device from the standard TOTP algorithm (RFC 6238). No network needed.

Questions

Does autofilling 2FA codes make 2FA useless?

It keeps your second factor in the same vault as your password, which is a trade-off. You still get what most people need 2FA for: a leaked password alone does not get anyone in, and codes are only filled on the sites they belong to.

Which sites does it work with?

Sites that use standard authenticator-app codes: six digits, changing every 30 seconds (TOTP with SHA-1), which is what almost every site uses. Plus email codes from the supported webmails.

How much does it cost?

Free for unlimited 2FA codes and up to 50 passwords, notes and other items. Sync across devices is $3/month or $30/year.