TrayAuth

KlowdfurrRad·KlowdfurrRad.TrayAuth

Authenticator codes in the Windows tray, in a panel that slides out of the taskbar.

TrayAuth keeps your two-factor authentication codes one click away. Click the tray icon and a panel slides out of the taskbar showing live TOTP codes; click a code to copy it, and the clipboard clears itself twenty seconds later. Accounts are added by typing the base32 setup key a site shows next to its QR image. The add dialog previews the code your key produces, so you can check it against the site before saving. Accounts are stored in %APPDATA%\TrayAuth, encrypted with Windows DPAPI and readable only by your Windows account. TrayAuth makes no network calls of any kind, and there is no account to create and nothing to sync. Because a DPAPI vault is bound to the Windows profile that wrote it, TrayAuth can export every account to a JSON file plus a scannable QR image, so a backup can be restored here or added to a phone. Codes are generated per RFC 4226 and RFC 6238 and verified against the published RFC test vectors for SHA1, SHA256 and SHA512, so they agree with any other authenticator app. Six, seven and eight digit codes and custom periods are supported.