riffus / kr-u2f

A Browser extension that lets you use your phone as a U2F Authenticator for strong, unphishable 2FA.

kr-u2f

kr-u2f brings Universal Second Factor (U2F) to the browser using keys stored in the Krypton (iOS or Android) mobile app. The private keys never leave the phone.

Currently, kr-u2f supports Google Chrome and Mozilla Firefox. Safari and Edge support are coming soon!

Install

Chrome/Chromium

Install Krypton Authenticator from the Chrome Extension Store.

Firefox

Install Krypton Authenticator from Firefox Add-ons.

Build Dependencies

• nodeJS
• npm
• yarn

Install / Run From Source

yarn
make build

Then:

Chrome/Chromium

Click the triple-dots in the upper-right > More Tools > Extensions, enable Developer Mode, click Load Unpacked, then select the dist/chromium folder.

Firefox

Click on the three bars in the upper-right > Add-ons, in the resulting page click the gear in the upper-right > Install Add-on From File... , then select the dist/firefox/manifest.json file.

CONTRIBUTING

Check out CONTRIBUTING.md

Security Disclosure Policy

Krypton follows a 7-day disclosure policy. If you find a security flaw, please send it to [e-mail] encrypted to the PGP key with fingerprint B873685251A928262210E094A70D71BE0646732C (full key here). We ask that you delay publication of the flaw until we have published a fix, or seven days have passed.

LICENSE

We are currently working on a new license for Krypton. For now, the code is released under All Rights Reserved.