FactorCat replaces the MFA copy-paste routine with a single approval. The extension detects MFA input fields on login pages, matches the site against your token inventory by domain, and requests approval. Approve from your phone or the web dashboard, and the six-digit code fills in automatically. ZERO-TRUST ARCHITECTURE The browser extension is architecturally prevented from ever holding a TOTP secret. It receives only a computed code, only after you approve the request. Secrets are stored server-side in encrypted cloud vaults or locally on your mobile device — never in the browser. KEY FEATURES - Auto-detection of MFA fields on login pages - Push-to-approve via mobile app or one-click approve from the web dashboard - Automatic code fill — no typing, no clipboard - Domain-based token matching with display-name picker for multi-token domains - QR capture on MFA setup pages — add tokens without your phone camera - Fallback to clipboard and on-screen code display when auto-fill isn't possible HOW IT WORKS 1. Visit a login page that asks for an MFA code 2. FactorCat detects the input field and matches your token 3. Approve the request — from a push notification on your phone or directly in the web dashboard 4. The code fills in automatically — you're logged in SECURITY BY DESIGN - TOTP secrets never enter the browser — stored in cloud vaults or on your mobile device - The extension only receives computed codes, never raw secrets - All communication is encrypted end-to-end - Biometric confirmation available for mobile approvals - MFA and passwords stay separate — no single point of failure WORKS WITH OR WITHOUT THE MOBILE APP Cloud vaults work with just the web dashboard — no mobile app required. Add the mobile app later for push notifications, biometric approval, and locked vaults with on-device encryption. Free to use. Learn more at factorcat.com

Latest version

Version 1.2.0

Older versions

Version 1.1.0

Version 1.0.1

Version 1.0.0