Security Disclaimer
=====================================

[English]

This extension stores TOTP secrets encrypted with AES-256-GCM and PBKDF2-SHA256 key derivation. While industry-standard algorithms are used, no encryption can be guaranteed unbreakable. Your secrets may be at risk if your master password is weak or compromised.

This extension can optionally sync your encrypted vault to Google's servers via Chrome Sync. Your data is encrypted before leaving your device, but it will reside on third-party infrastructure outside your direct control and cannot be guaranteed safe from future attack.

Storing both your login password and TOTP secrets on the same device does not comply with multi-factor authentication (MFA) security best practices. TOTP is designed as a "something you have" factor — keeping it alongside your passwords on the same device undermines this principle.

By using this extension you voluntarily accept all security risks. The author is not liable for any loss, data breach, account compromise, or other damage of any kind arising from your use of this software.