Versions:
TrayAuth, published by KlowdfurrRad and currently at version 1.0.0—the only version released to date—is a Windows two-factor authentication utility that places live TOTP codes in the system tray, one click away from the taskbar. Falling into the security and authentication software category, it serves users who want desktop access to their one-time passcodes without reaching for a phone. Clicking the tray icon slides a panel out of the taskbar displaying current codes; clicking any code copies it to the clipboard, which clears itself automatically twenty seconds later. Accounts are added by typing the base32 setup key that a site displays next to its QR image, and the add dialog previews the code the key produces so it can be checked against the site before saving. All account data is stored in %APPDATA%\TrayAuth, encrypted with Windows DPAPI and readable only by the Windows account that created it. TrayAuth makes no network calls of any kind, and there is no account to create and nothing to sync, making it suitable for offline or privacy-sensitive environments. Because a DPAPI vault is bound to the Windows profile that wrote it, TrayAuth can export every account to a JSON file plus a scannable QR image, so a backup can be restored on the same machine, moved to a new profile, or added to a phone-based authenticator. Code generation follows RFC 4226 and RFC 6238 and is verified against the published RFC test vectors for SHA1, SHA256 and SHA512, ensuring the codes agree with any other compliant authenticator application. Six, seven and eight digit codes are supported, along with custom time periods, covering the range of configurations used by services that issue time-based and counter-based one-time passwords.
Tags: