Two-factor codes in your menu bar

Adding accounts

Click the Menu OTP icon in the menu bar and choose Menu OTP Settings.... The Add Account section has three tabs:

• From Screen: click, then drag across a setup QR code anywhere on screen. Settings fades while you select, so you can see a code behind it, then comes back with the new account open, ready to check or give an icon. It needs the Screen Recording permission, which Menu OTP asks for the first time.
• Bulk Import: click or drop a file with one otpauth:// URL per line. Menu OTP reports how many accounts were added, updated, and skipped.
• Manual: paste an otpauth://totp/ URL, like the one encoded in a setup QR code, or enter the issuer, account name, and secret, and optionally choose a favicon or an emoji.

Accounts are matched by issuer and account name, so adding one you already have updates it instead of creating a copy. Imports keep any icon you already chose. A secret that isn't valid base32 is refused when you enter it, rather than failing later when you copy a code.

Secrets are masked as you type or edit them, and so is the URL field, since the URL contains the secret. Click the eye button beside a field to see what's in it.

Copying a code

Click an account in the menu. Its code is copied to the clipboard, and the menu shows the issuer and code in large type until you click somewhere else. For the next minute, the top of the menu shows which account you copied last. Codes are marked as sensitive on the clipboard, so clipboard managers that honor that don't keep them.

With the menu open, Up Arrow and Down Arrow move the highlight, Return or Space copies, and Esc closes it. Command-Q quits, or use the Quit Menu OTP item at the bottom of the menu. About Menu OTP, just above it, shows the version and build number and the license.

Icons

If you add an account without choosing an icon, Menu OTP guesses the service's website from what you entered and fetches its icon. Any account still missing an icon is filled in the next time the app starts, or right away with Find Missing Icons, which appears in Settings whenever an account has no icon.

To fix a wrong or missing icon, point at the account in Settings and click its pencil button. With Favicon selected, type the service's website and the icon is looked up as you type. Choose Emoji to open the macOS emoji picker instead.

In the menu, icons stay grey until you point at an account, then show in full color.

Organizing

Click Reorder above your accounts, drag them into the order you want the menu to show them, then click Done. Point at an account to show its buttons: the eye hides it from the menu (it stays in Settings marked Hidden), the pencil edits it, and the trash deletes it, after asking.

General

Turn on Open at login to start Menu OTP with your Mac. It lives in the menu bar and only appears in the Dock while Settings is open. If its menu bar icon is ever out of reach, hidden behind the notch for example, open Menu OTP again from Finder or Spotlight to bring up Settings.

Export Accounts... saves every account to a text file, named menu_otp_export.txt unless you choose another name, with one otpauth:// URL per line. That's the format Bulk Import reads, and one most authenticator apps accept, so it works as a backup or for moving to another Mac. Icons and hidden settings aren't included.

The file holds your secrets unencrypted, so Menu OTP asks before writing it. Anyone who can read it can generate your codes. It's saved readable by your user account only, but keep it somewhere safe and delete it when you're done.

Privacy

Accounts are saved to one file on your Mac, encrypted with AES-256. The key is kept in your login Keychain. The only network requests Menu OTP makes are icon lookups, which send a website name to DuckDuckGo's icon service, and to Google's only when DuckDuckGo has no icon for it. Secrets are never sent anywhere. A QR code scanned with From Screen is read on your Mac, and the screen grab is deleted as soon as it has been read.

Supported codes

Menu OTP generates standard TOTP codes: 6 digits, a new code every 30 seconds, using SHA-1. Accounts set up for 8 digits, a different interval, another algorithm, or counter-based (HOTP) codes won't work.