networkshard
← projectsLive

/projects/shardpass

ShardPass

Local-first TOTP authenticator with inline autofill.

GitHub ↗

About

Local-first Chrome MV3 TOTP authenticator with inline autofill, an encrypted local vault, QR / otpauth import, and per-domain account matching for 2FA-heavy workflows.

Features

  1. 01AES-256-GCM vault, PBKDF2-HMAC-SHA256 (250k iterations)
  2. 02TOTP (RFC 6238) + HOTP (RFC 4226) with inline floating chip
  3. 03Import via manual entry, QR image, otpauth:// URI or backup
  4. 04Optional E2EE sync with Ente Auth (SRP + libsodium)
  5. 05Per-domain account matching for auto-suggest
  6. 06Biometric unlock on supported devices

Stack

  • TypeScript
  • React
  • Tailwind
  • Vite
  • Chrome MV3

Security Architecture

Vault Encryption
AES-256-GCM
Key Derivation
PBKDF2-HMAC-SHA256, 250k rounds
TOTP Standard
RFC 6238 (time-based)
HOTP Standard
RFC 4226 (counter-based)
Optional Sync
E2EE via SRP + libsodium
Data Location
Local-only (chrome.storage)