SSem Your OTP codes,
for your fingerprint only.
SSem TouchOTP shows your two-step verification codes (TOTP and HOTP) right in the Mac menu bar. Every secret is encrypted with a key bound to the Secure Enclave, so it opens only with the fingerprints enrolled right now. The app has no network access at all, so nothing ever leaves your Mac.
Why SSem TouchOTP
Designed from day one as an authenticator where nothing leaves your Mac — so convenience never costs you security.
A vault only your fingerprint opens
Secrets are sealed with a Secure Enclave key that only Touch ID can use. There is no login-password fallback, and adding or removing a fingerprint seals the existing vault, so a fingerprint added later can’t open it either.
Fully offline
The app has no network entitlement at all. No sync, no usage statistics, no ads, no crash reporting, not even update checks.
Move from Google Authenticator in one go
Supports Google Authenticator’s “Export accounts” QR codes (including multi-part exports), QR images from any service, otpauth:// addresses, and manual secret entry.
Copies that don’t linger
Click a code to copy it; it is cleared automatically after 30 seconds. It is marked so it stays off Universal Clipboard (your other devices) and out of clipboard history apps.
Locks by itself
Locks after 30 seconds to 5 minutes of inactivity, and immediately on screen lock, screen saver, sleep and user switching. Locking also clears a copied code from the clipboard.
Encrypted backups
Export every account to a passphrase-encrypted backup file (.touchotp) to be ready for fingerprint changes or a new Mac. The app can generate a strong random passphrase for you.
Good to know
Strong protection comes with a few rules. Please read these before you install.
Adding or removing a fingerprint makes the existing vault impossible to open. This is by design, so a fingerprint added later can’t open it. Make a backup whenever you add accounts, and restore from it after changing fingerprints.
- If you forget your backup passphrase, nobody — including us — can open the backup. Write it down on paper or in a password manager.
- Copying the vault file to another Mac or user account doesn’t work; it won’t open there. Use a backup file to move to a new Mac.
- There is no phone sync. If you also need codes on your phone, keep using a phone authenticator as well.
- SSem TouchOTP’s windows are excluded from screen recording, screen sharing and screenshots (as far as macOS allows).
A quick tour
Everything happens in the panel that opens from the menu bar icon. You can also open it in a separate window.
Get the app
SSem TouchOTP is sold on the Mac App Store. Buy it once and use it on your Macs signed in with the same Apple Account; the App Store installs updates for you. It is currently in App Store review; once it is released, use the button below.
- Version
- 1.0.1
- Price
- US$0.99 (local App Store pricing)
- Store
- Mac App Store
- Developer
- Levelupsoft Inc.
System requirements
- macOS 14 Sonoma or later
- A Mac with Touch ID, or an Apple silicon Mac with a Magic Keyboard with Touch ID
- A macOS login password and at least one enrolled fingerprint
Install
- Buy and install SSem TouchOTP from the Mac App Store.
- Open it from Applications or Launchpad; a lock icon appears in the menu bar.