mvm2factor
Your 2FA codes, on the machine you are already logged into.
About
mvm2factor is a TOTP authenticator. Add an account with the Base32 secret the service gives you, and it shows the six-digit code with a ring counting down the thirty seconds until the next one. The desktop window and optional public page share the same Apps Hub identity, so every Apps Hub profile has its own private vault and sees the same accounts on every device where it signs in. The public page stays disabled until an administrator enables it in Apps Hub. For browser use, mvm2factor can generate a ready-to-install Chrome or Firefox extension from the app itself. The extension opens your public vault in a compact popup, can show only accounts matching the website in the active tab, and fills a selected one-time code with one click. Its initial server address is configured automatically when you generate it and can be changed later in the extension settings. Codes are copied with one click. Accounts can be sorted newest first or by what you used last, so the one you need is usually at the top. Secrets are validated when you add them, so a mistyped key is caught immediately rather than three failed logins later. Your secrets are encrypted in the browser with AES-GCM and a key derived from a password only you know. Codes are computed locally after unlocking, and neither that password nor decrypted secrets are sent to the server. On the first open after upgrading, choose a password to encrypt your existing accounts without losing them. Keep the vault unlocked from five minutes to a week, or until the browser session closes; opening it renews the chosen period. JSON and CSV import and export remain available after unlocking, and exported files contain readable secrets.
What it does
- TOTP codes for any service that issues a Base32 secret.
- Browser-side encryption and code generation, a password-protected vault and a renewable unlock period.
- Animated 30-second countdown, refreshing automatically.
- One-click copy.
- Account name plus an optional username or email for telling similar accounts apart.
- Sort by newest first or by last used.
- Secret validation on entry, with a clear error for an invalid key.
- A standalone public page that an administrator can enable or disable from Apps Hub.
- A separate private vault for every Apps Hub profile.
- An optional website on every account for matching the current browser tab.
- A generated Chrome or Firefox extension with current-site filtering and one-click autofill.
- An app-to-app API for account lists and encrypted code data; only a browser with the unlocked key can compute an encrypted account’s code.
Integrations
Other apps can list account metadata and request encrypted secrets with their vault parameters. A browser holding the vault key computes the code locally. Encrypted code data is kept internal and is not offered to Automations, External APIs or mvmAI.
Requires: The mvm2factor App API enabled in Apps Hub → Settings → App APIs, which is off by default.
Reviews
Reviews and ratings are written from the App Store of an installed mvmOS system.
No reviews yet.