CUNYAutoLogin by Alexander Marty

CUNY logs you out constantly. CUNYAutoLogin fills your email, password, and six-digit login code automatically so you get straight into CUNYFirst, Brightspace, DegreeWorks, or any other site that routes through CUNY Login — no typing required.

What gets filled

• Your CUNY Login email and password
• The six-digit MFA code, generated and entered for you
• Works on every CUNY site that sends you through the CUNY Login page

Your credentials never leave your device

Everything is encrypted locally using AES-256-GCM with a key derived from your extension password. Nothing is sent to a server. Optional biometric unlock (Face ID, Touch ID, or Windows Hello) lets you skip typing the password on supported devices.

Setup takes about five minutes

A guided sidebar walks you through saving your credentials, adding a new authenticator through CUNY's self-service portal, and setting your vault password + biometrics. After that, login is automatic every time.

Data collection

Do not be worried by the prompt on extension install. The data collection for this extension is tightly limited to the minimum needed to function.
- "personally identifying information" -- Your CUNYFirst email
- "authentication information" -- Your password & secret for the six digit code
- "website content" -- Naturally the web extension needs to look at the login page to autofill your credentials. It also looks at the self-service page during onboarding to guide you in setting up CUNYAutoLogin. Website content is NOT persisted to storage; this extension does NOT, for example snoop on your grades on Brightspace and save it somewhere.

Usage after setup

1. Unlock the vault every time you start up your browser
2. Go to your normal sites like Brightspace
3. No need to type your password or take out your phone; it logs in for you!
4. Get back to studying!

Open source — not affiliated with CUNY

Source and issue tracker: github.com/AlexCMarty/CUNYAutoLogin