Two-Factor Auth Setup Reminder Badge

WHAT IT DOES

This script detects whether two-factor authentication (2FA) is available on the current site's login or account settings page and displays a reminder badge. It scans for 2FA-related keywords (two-factor authentication, authenticator app, SMS verification, backup codes, enable 2FA, multi-factor authentication) and determines if 2FA appears to be available but not yet configured, already enabled, not available, or unknown. The panel shows a color-coded status badge (green = enabled, yellow = available, orange = check settings, gray = unknown/not available), a brief description of what 2FA offers, and actions to mark it as "already configured" or dismiss the reminder per domain. All user preferences are stored locally and never transmitted.

WHERE IT RUNS

Works on any login page or account settings page—email services, social media, banking portals, work accounts, or any site with authentication settings. The script scans the page content and detects 2FA indicators regardless of the site's specific layout.

HOW TO USE

The panel appears automatically on login and account settings pages. The status indicator shows: "🔐 2FA Available" (yellow)—2FA appears available but not configured, with action buttons to mark it as "Already Configured" or "Dismiss"; "✅ 2FA Enabled" (green)—2FA appears to be already set up; "❌ Not Available" (gray)—2FA doesn't appear to be offered; "⚠️ Check Settings" (orange)—security page detected but 2FA status uncertain. If you mark 2FA as "Already Configured," the panel shows a confirmation message and will not remind you again for that domain. If you choose "Dismiss," the reminder is hidden for that domain until you reset the preference. Use the "Rescan Page" button to re-evaluate the page content. Toggle the "Show badge" setting to control panel visibility.

TECHNICAL MECHANISM: MULTI-PASS KEYWORD SCORING WITH CONTEXTUAL PAGE DETECTION

The script uses a three-layer heuristic to determine 2FA status. First, it checks if the current page is a security or account settings page by testing the URL path against keywords (security, account, settings, profile, preferences, 2fa, two-factor). Second, it scans the entire page text content against three keyword groups: Setup Indicators (two-factor authentication, authenticator app, SMS verification, backup codes, enable 2fa, set up 2fa, turn on 2fa, two-step verification, mfa, Google Authenticator, Authy)—each match increases the setupScore; Enabled Indicators (2fa enabled, two-factor enabled, authenticator app connected, already enabled, configured)—each match increases the enabledScore; Not Available Indicators (2fa not available, two-factor not supported, no 2fa)—each match increases the notAvailableScore. Third, it scans all interactive elements (buttons, links, labels, spans, divs) for specific UI text patterns like "Enable 2FA" or "2FA Enabled." The final status is determined by checking enabledScore >= 2 or foundEnabledElement for "enabled," notAvailableScore >= 2 for "unavailable," foundSetupElement or setupScore >= 2 for "available," and a hybrid condition for "unknown" when on a settings page with security-related content but insufficient 2FA indicators. User preferences are stored per domain in GM_setValue, allowing persistent dismissal or configuration marking.

THE PANEL

The 2FA reminder appears in a draggable, resizable panel that remembers its position per site. The panel shows the domain name, color-coded status badge, and description. When 2FA is available, action buttons let you mark it as configured or dismiss the reminder. Drag by the header to reposition, collapse to a compact icon with a click, and resize using the bottom-right corner. The panel snaps to screen edges for tidy placement and closes with the Escape key. All settings—badge visibility toggle and panel position—persist per website using GM_setValue, so your view returns exactly as you left it.

PLEASE NOTE

This script requires the free BotGentz extension to run. The script scans page text and elements for 2FA indicators—it never reads, captures, or transmits any personal data, passwords, or authentication codes. All data is stored locally in your browser via GM_setValue. The detection is heuristic and may occasionally misclassify pages; use the "Rescan Page" button or manual status buttons if the detection seems incorrect. The "Already Configured" and "Dismiss" options are per-domain preferences that persist across visits. This reminder is for educational and security awareness purposes only—always verify 2FA setup through your account's official security settings.