MailKey: verification codes for Gmail™

One-click fill for email verification codes. Read-only Gmail access, last hour only — no servers, nothing leaves your device.

Stop tab-switching for verification codes. You know the dance: a site says "we emailed you a code," you open Gmail in a new tab, wait, refresh, memorize six digits, tab back, type them, get one wrong, repeat. Phones fixed this years ago — codes from Messages appear right above the keyboard. MailKey brings that to your desktop browser, powered by your Gmail. HOW IT WORKS 1. Connect your Gmail (read-only) once, from the extension's settings. 2. Choose where MailKey may run: every website, or only sites you list. 3. When a site shows a verification-code field, MailKey checks your Gmail for codes that arrived in the last 60 minutes — and only the last 60 minutes. 4. A small chip appears next to the field: the code, plus who sent it ("from northwind.app"). If the sender matches the site you're on, you'll see a match badge. It is a visual aid to help you notice a mismatch — not a security guarantee. 5. Click Fill. That's it. MailKey never fills or submits anything on its own. BUILT PRIVACY-FIRST • No servers. MailKey has no backend. Your mail and tokens never leave your device; requests go straight from your browser to Google. • Last hour only. Every Gmail request MailKey makes is hard-limited to mail from the past 60 minutes. (Honesty note: Google's permission system has no time-scoped grant — the consent screen will say MailKey can "read" your Gmail. The one-hour limit is enforced by MailKey itself, in one small auditable function.) • Nothing stored. Email bodies are scanned in memory and immediately discarded. An extracted code lives in session memory for 60 seconds, then is wiped — sooner if you use it. • No analytics, no telemetry, no ads, no data sale. Ever. • You control the blast radius. Run it everywhere, or only on the handful of sites where you actually log in. WHAT YOU'LL BE ASKED TO APPROVE — AND WHY • A Google consent screen requesting read-only Gmail access (that's how codes are found; see the honesty note above). • A Chrome permission prompt for site access — only for the sites you choose in settings. MailKey installs with access to no websites at all. MailKey does one thing. It will never grow ads, "insights," shopping features, or anything else that wants your inbox. MailKey is not affiliated with or endorsed by Google. Gmail is a trademark of Google LLC.