TrayAuth 1.0.0

Authenticator codes in the Windows tray. Click the tray icon and a panel slides out of the taskbar with your live codes; click a code to copy it.

Install

Download TrayAuth-Setup-1.0.0.exe below and run it.

No administrator rights and no UAC prompt — it installs under your own user profile. The .NET runtime is bundled, so there is nothing else to install.

You get a Start Menu entry, an entry in Settings → Installed apps, and start-with-Windows, so the icon is always in the tray.

What it does

• Add accounts by typing the base32 setup key the site shows next to its QR code
• Click a code to copy it — the clipboard clears itself after 20 seconds, and only if it still holds that code
• Ctrl+Alt+A opens the panel from anywhere
• Countdown ring per account, amber in the final 5 seconds
• Supports 6/7/8 digits, custom periods, and SHA1/SHA256/SHA512

Your accounts

The vault lives in %APPDATA%\TrayAuth\vault.dat, encrypted with Windows DPAPI and locked to your user account. It is never sent anywhere — TrayAuth makes no network calls at all.

Back it up. A DPAPI vault is bound to the Windows profile that wrote it: reinstall Windows or lose the profile and it cannot be read again. Use Export all accounts… from the tray menu. You get one JSON plus a scannable QR PNG per account, and a combined file that restores everything.

Those export files are not encrypted — each contains a secret that generates that account's codes indefinitely. Treat them like the passwords themselves.

Verified

89 tests, including the published RFC 6238 test vectors for SHA1, SHA256 and SHA512 and the RFC 4226 HOTP vectors, so the codes agree with every other authenticator.

Notes

• Windows 10 1809 or later, 64-bit
• The installer is not code-signed, so SmartScreen may warn on first run — choose More info → Run anyway, or verify the SHA256 below
• Uninstalling leaves your accounts in place unless you say otherwise

SHA256 of the installer:
8B1CB1487258F0BD3D9E061A6D85B7A9659F9529D12888B6A31FA7EF36D7D83A