OTPilot

Fills two-factor codes from your Gmail inbox into the site you're signing in to.

OTPilot watches the Gmail account already signed in on this Chrome profile and types the sign-in code into the page you're on. When a site asks for a code that was emailed, OTPilot checks that account for two minutes. Each check reads only mail that arrived after the previous one. If the page names the address the code was sent to, only that account is checked. If the sender matches the site, OTPilot fills the field. If the code came from somewhere else, it asks before typing. Press submit stays off until you turn it on. Ctrl+Shift+Period (Command+Shift+Period on a Mac) fills the latest matching code. It runs on your computer. There is no OTPilot account and no OTPilot server. The full code stays in memory only long enough to type it. A short list of recent fills stays on the device, with the code hidden except for the last two digits. Outlook, iCloud, text messages, and authenticator apps are not read. Mail forwarded into Gmail is fine. It ignores shipping notices, promo codes, and messages older than 10 minutes. It stays quiet when the page asks for a text-message code or a code from an authenticator app. Only matching sites is on by default. Privacy policy: https://tools.leadomator.com/otpilot/privacy