Codes from text messages on Android
Autothenticator ยท Updated 18 October 2026
|
Ask each time (default) |
From notifications (optional) |
| How |
At a code box, choose Wait for a code by text message. When the text arrives, Android asks Allow |
Reads new notifications from the messaging app, and offers the code at the code box |
| Permissions |
None. No SMS permission |
Notification access, granted in Android's settings |
| Android versions |
All, with Google Play services |
Android 11 to 14 only. Android 15 hides codes from notification readers |
- Nothing is kept. The text is read once for its code, and never stored, logged, synced or sent anywhere. The code
is kept in memory for at most 10 minutes, and forgotten once filled.
- The vault isn't needed, so this works while the vault is locked.
- Site-bound texts (ending
@example.com #123456) fill only on that site, the same protection as for other codes.
Other texts are filled only when the person picks them.
- Chrome fills site-bound texts itself, on Android, through its own system. Android passes Autothenticator only the
other texts.