OTPeek app icon OTPeek

Stop hunting for the code.

Verification codes turn up across every email address you own and your phone. OTPeek watches all of them at once and puts the code on screen the moment it lands — so you never go looking again.

Free and open source · macOS 14 or later · Version 1.0.1

An OTPeek popup: a text from Google showing the code 482913, with the hint Click to copy An OTPeek popup: an email from Linear in Personal Gmail showing a verification link to linear.app

Six inboxes. One place to look.

Gmail, Outlook, iCloud, Proton, Fastmail, Yahoo, your phone — and any other IMAP mailbox. Whichever one the code lands in, it shows up in the same corner of the same screen, labelled with the mailbox it came from, so you stop guessing which tab to open.

It finds it, not you

Every mailbox and your iPhone's texts, watched together. It stops mattering which address the code was sent to.

It shows up in a second

A live connection to your mail, so the popup appears about a second after the message arrives. No refreshing.

One click to copy

The popup never takes focus. Your cursor stays in the login field, so it's click, then ⌘V, and you're in.

The OTPeek settings window, with a Mailboxes section and an Add mailbox button, a toggle for watching iPhone text messages, and options for how long the popup stays

Add your mailboxes once.

Setup is a window, not a config file. Pick a provider, enter your address, and OTPeek checks it against the real server before saving — so a wrong password tells you straight away.

Passwords go into the macOS Keychain. Nothing is sent anywhere: your mail is read directly from your provider, and your texts never leave the Mac.

You set a mailbox up once. It is saved, OTPeek starts with your Mac, and codes keep arriving after a restart — there is nothing to reconnect.

Your passwords stay on your Mac.

You are about to type a mail password into an app you downloaded, so this is enforced in code rather than promised in a paragraph.

There is no server

Your Mac connects straight to your mail provider. Nothing is relayed through anyone else — not the authors, not an analytics service.

It can only reach your mailboxes

Every connection passes a check that allows the servers you added, and Microsoft's sign-in page. Anything else fails before it opens.

The build checks itself

Run ./audit.sh. If any code outside the two vetted files could reach the network, the build refuses to produce an app.

Install in about a minute.

Unzip the download and drag OTPeek into Applications. The first time, right-click OTPeek and choose Open. For text messages, grant Full Disk Access when the app asks — it reads the same Messages database that Messages.app uses.