This Chromium extension allows you to generate two-factor authentication codes directly in your browser.
It can also automatically insert the generated 2FA code while logging in to the University of Groningen's online portal, Brightspace, so that you don't have to enter them yourself.
This browser extension is exclusively for the use of RUG staff and students!
Download the extension from the Chrome Web Store
Coming soon
In order to be able to generate the 2-factor-authentication codes, the extension needs access to your secret key. This is a requirement for using the extension, and without this secret key the extension cannot work.
Please note that this will reset your old authenticator key, meaning that you will have to re-insert the authenticator key in your phone. Please have your phone with the authenticator app on hand.
Even though the risks involved with this setup are small, I am not responsible for any loss of access/information/physical property that may occur during this procedure.
To allow the extension access to this secret key, do the following:
Do you already have an image of your QR code from when you set it up? Then you can skip to section 2.
Go to https://mfa.rug.nl/.
Log in with your employee/student number and password.
A code will be sent to your private email address. Follow the instructions on the screen and enter the code you have received.
After this, you will see a box titled Google Authenticator in the bottom of the page. Click on Modify.
Read the on-screen instructions and press Next.
You will see a QR code on screen. Do not close this tab.
Important: Take a screenshot of the code:
Windows: press ⊞ Win + Shift + S and then drag a box around the QR code.
It will be automatically saved in C:\Users\<your username>\Pictures\Screenshots.
On your mobile phone, reset the authenticator using the new QR code:
Google Authenticator
Enter the Google Authenticator app
Long-press on the box titled RUG (WORKSPACE\S0000000)
Press on the 🗑️ garbage bin icon (top-right) and then on Remove account.
Press on the plus icon (bottom left) and then Scan a QR code. Scan the QR code on the opened tab.
Return to the browser tab with the QR code open. Press Next.
Input a code from the authenticator app on your phone.
Chromium (Chrome, Edge, Brave etc.)
In your Chromium-based browser, install the browser extension.
Click on the 🧩 Extensions icon to the right of the search bar, then click on RUG Authentication Assistant.
Click on Upload QR code, then select the file with the QR code you saved earlier
(it should be in C:\Users\<your username>\Pictures\Screenshots on Windows)
You can now test the extension: enter https://brightspace.rug.nl (log out if you were already logged in), and, when logging in, you should see that the 2FA code is filled automatically.
For purposes of security, you may want to consider deleting the screenshot of the generated QR code from your computer.
Firefox
Install the browser extension
The sidebar will open upon the extension being installed. Click on Upload QR code, then select the file with the QR code you saved earlier (it should be in C:\Users\<your username>\Pictures\Screenshots on Windows)
Before using the extension for the first time, you have to allow it access to pages in the *://rug.nl domain. Press on the 🧩 Extensions icon to the right of the search bar, then on the ⚙️ Manage icon to the right of the extension name, then on Manage Extension. On the page that just opened, switch to the Permissions tab under the extension name and activate the permission under Optional permissions for added functionality.
You can now test the extension: enter https://brightspace.rug.nl (log out if you were already logged in), and, when logging in, you should see that the 2FA code is filled automatically.
For purposes of security, you may want to consider deleting the screenshot of the generated QR code from your computer.
Can I disable the autocompletion feature? (stop 2FA codes from being automatically inserted and sent)
Yes. Open the extension pop-up (click on the 🧩 Extensions icon to the right of the address bar, then click on RUG Authentication Assistant. Click on the Deactivate button under Autocomplete 2FA code.
Does this extension make my authentication less secure?
It is always more secure to have the authenticator app only on another device. Do not use this extension on shared computers or inside shared computing facilities. Do not use this extension if you have sensitive information available freely on your account. While this extension reduces the overall level of your account's security, it increases the ease-of-use during authentication. It is for you to decide if you want to use it or not.
Is this extension secure in itself?
The extension does not access or use any remote code. It does not send or receive any sort of data across the internet. Everything you input (like the QR code or the secret key) stays on your computer. The extension does not collect any personal data at all.
Can I use it on multiple browsers/devices?
Yes. Please note that the more devices you have the secret key installed on, the less secure your account becomes. Also, for the sake of security, the secret key does not sync with your Google/Microsoft/Brave account: for each new device, you will have to upload the QR code separately.
How does this extension work?
This extension decodes the QR code you upload and extracts the secret key from the decoded data. Based on this secret key and with the help of the OTPAuth library, it is able to generate 2-factor-authentication codes in a similar manner to how Google Authenticator does it. If you activate the autocomplete feature, every time you enter a website in the domain rug.nl, it injects a script that automatically inserts the code for you and presses Next.
Can I see the source code of this extension?
Yes. It is available here: https://github.com/tiberiufrat/rug-authentication-assistant.
I have another question…
Please contact me at my email address, t.fratila@student.rug.nl.
First version
Fixed issue whereby the autocomplete field would not be filled in automatically. This issue occured because Brightspace changed the layout of the authentication page.