Automatic 2FA Code Autofill for macOS
CopyThat is a free macOS utility that automatically detects two-factor authentication codes from iMessage and Apple Mail and makes them paste-ready system-wide. Stop retyping six-digit codes — read how it works, follow the setup steps, or jump straight to the download.
First launch on macOS
macOS will warn "Apple could not verify…" — that's expected for indie macOS apps distributed outside the App Store. To authorize CopyThat:
- Open CopyThat 2fa from Applications and dismiss the warning.
- Open System Settings → Privacy & Security.
- Scroll to the bottom and click Open Anyway. Confirm with Touch ID.
- Open CopyThat 2fa again and click Open.
How CopyThat works
CopyThat watches incoming iMessage and Apple Mail messages on your Mac, recognizes verification-code patterns (for example, "Your code is 492-385"), and copies the detected code to your clipboard. You can then paste it into any login form with Cmd+V — no Messages app switching, no manual retyping.
Universal Autofill
Detects 2FA codes from iMessage and Apple Mail and makes them paste-ready everywhere on your Mac — browsers, native apps, terminal sessions.
Smart Detection
A local parser scans messages for verification-code keywords and numeric patterns so the right code is always ready, even when the message wording varies.
Privacy First
Everything stays local. No telemetry, no analytics, no message content ever leaves your Mac. See the privacy policy for the full data-handling commitment.
Setup in seconds
After downloading, CopyThat asks for permission to read incoming Messages and Mail. Apple documents how to manage these grants in the macOS Privacy & Security settings — you can revoke access at any time.
-
1
Install CopyThat
Download and drag CopyThat into your Applications folder.
-
2
Grant Permissions
Allow access to Messages and Mail so CopyThat can detect incoming verification codes.
-
3
Enjoy
Next time you get a code, just paste (Cmd+V) or click the notification.
Frequently asked questions
Is CopyThat free?
Yes. CopyThat is a free download released under the Creative Commons Zero (CC0) license.
Does CopyThat send my messages anywhere?
No. All message parsing happens locally on your Mac in memory. CopyThat has no analytics, no telemetry, and no cloud component for message content. See the privacy policy for the full statement.
Which version of macOS does CopyThat require?
CopyThat runs on macOS 12.0 (Monterey) and later, on both Apple Silicon and Intel Macs.
Where do 2FA codes come from in CopyThat?
CopyThat watches incoming iMessage and Apple Mail messages for verification-code patterns and copies the detected code to your clipboard so you can paste it anywhere with Cmd+V.
Why does macOS warn that "Apple could not verify" CopyThat on first launch?
That warning is expected for indie macOS apps distributed outside the App Store. Follow the first-launch steps in the download section to authorize the app via System Settings → Privacy & Security.
Upgrade your workflow
Download CopyThat today and never type a 2FA code again.
Download for macOSFirst launch on macOS
macOS will warn "Apple could not verify…" — that's expected. To authorize CopyThat:
- Open CopyThat 2fa from Applications and dismiss the warning.
- Open System Settings → Privacy & Security.
- Scroll to the bottom and click Open Anyway. Confirm with Touch ID.
- Open CopyThat 2fa again and click Open.