Scan QR codes off your screen
Setting up two-factor on a site? Tick reads the QR code straight from your screen. No phone, no camera.
Your 2FA codes, one keystroke away.
Tick is a free two-factor authenticator for your computer. Type a few letters, press Enter, and the code is on your clipboard. No more reaching for your phone every time you sign in.
- No account
- No server
- Works offline
- AES-256 encrypted
How it works
Type. Enter. Paste.
Signing in shouldn’t mean finding your phone, unlocking it, opening an app and typing six digits before they expire.
-
git
Type to find
Start typing anywhere. Tick filters your accounts as you type, so the right one is always one or two letters away.
-
Enter ↵
Press Enter
The current code is copied. If it’s about to expire, Tick hands you the next one so it never runs out mid-paste.
-
⌘V
Paste and you’re in
Paste into the login page. Tick clears the code from your clipboard a few seconds later.
Everything you need
Small tool. Thought through.
Move from Google Authenticator
Export from Google Authenticator and scan the transfer code once. Every account comes across together. Aegis and 2FAS work too.
Works offline, installs like an app
Codes are maths on a secret and the time, so no internet is needed. Install Tick from the address bar and it opens like any other app.
Locks itself
Tick locks after a few minutes away and clears copied codes from your clipboard, so an unattended laptop isn’t an open door.
Fixes a wrong clock
Codes fail when your computer’s clock drifts. Tick notices and corrects for it, so your codes keep working.
Encrypted backups
Download an encrypted backup and restore it on any browser with your master password. Move to another app any time.
Security
Your codes never leave this browser.
Tick has no server and no account. There is nothing to breach, because there is nowhere your codes are sent.
- Encryption
- AES-256-GCM with a random 256-bit data key
- Master password
- PBKDF2-SHA256 with 600,000 iterations and a random salt. Never stored.
- Storage
- One encrypted record in your browser’s IndexedDB. Nothing readable touches disk.
- Network
- No server, no analytics, no third-party requests. A strict Content Security Policy blocks outside scripts.
- Codes
- Standard TOTP (RFC 6238), generated on your device and verified against the official test vectors.
- While unlocked
- The key lives only in memory and is dropped the moment Tick locks.
The honest trade-off
Two-factor is strongest when your codes live on a different device from your passwords. Keeping both in one browser trades a little of that separation for a lot of convenience. If you choose Tick, use a strong master password and keep your sites’ backup codes somewhere safe. There’s no password recovery, by design.
FAQ
Questions, answered.
How do I get my 2FA codes on my computer?
Open Tick in your browser, create a master password, then add each account by scanning the QR code from the site’s two-factor setup page or by importing from your phone’s authenticator. After that, type a few letters of the account name and press Enter to copy the current code.
Can I move my Google Authenticator codes to my computer?
Yes. In Google Authenticator, choose Transfer accounts, then Export accounts. Tick reads the transfer QR code with your computer’s camera or from a photo of it and imports every account at once. Tick also imports Aegis and 2FAS exports.
Is it safe to keep 2FA codes in the browser?
Tick encrypts your codes with AES-256-GCM using a key derived from your master password, keeps them only in your browser, and never sends them anywhere. The trade-off is that two-factor is strongest when codes live on a different device from your passwords, so use a strong master password and keep your sites’ backup codes somewhere safe.
Does Tick send my codes to a server?
No. There is no server and no account. Codes are generated on your device with the standard TOTP algorithm, and the encrypted vault is stored in your browser’s IndexedDB. Tick makes no third-party requests and runs no analytics.
Does Tick work offline?
Yes. Two-factor codes are calculated from a secret and the current time, so no connection is needed. Install Tick from your browser’s address bar to open it like an app, even without internet.
What happens if I forget my master password?
It cannot be recovered, because only you know it and nothing is stored on a server. Download an encrypted backup from Tick’s settings and keep your sites’ backup codes, so you can restore access if you ever need to start over.
Is Tick free?
Yes, Tick is completely free with no account and no limits. It is made and maintained by MetricDeck.
MetricDeck
Made by the team behind MetricDeck.
We built Tick for ourselves because reaching for a phone fifty times a week got old. It’s free, and it stays free. If you like how Tick works, you’ll like what we’re building at MetricDeck.