Local encrypted authenticator
Your tokens stay encrypted on this device. Nothing leaves the browser.
Point the camera at an authenticator QR code.
Every token will be re-encrypted with a new random salt. Your current passphrase is not kept in memory after unlock.