Privacy Policy
Effective Date: March 25, 2026
XMR 2FA is a lightweight, fully local browser extension that generates two-factor authentication (2FA) codes directly on your device.
We do not collect any personal information.
The extension generates TOTP codes entirely locally in your browser. Your secret keys are used only to generate authentication codes within the extension. The extension performs no data collection, analytics, or network requests.
All data is saved locally using the browser’s storage API. If you uninstall or remove the extension, all saved accounts and secret keys will be permanently deleted and cannot be recovered by us.
Important: We strongly recommend that you keep offline backups of your 2FA secret keys and use multiple authenticator apps for redundancy.
This extension contains no tracking, no analytics, no telemetry, and no third-party services. It functions completely offline.
The extension only uses the "storage" permission to save your 2FA accounts locally so they persist between browser sessions. No other permissions are requested.
This extension is not intended for children under the age of 13, and we do not knowingly collect any data from children.
If you have any questions about this Privacy Policy, please reach out to us on X:
X (Twitter): @xmr2fa