Option to hide codes (copy/paste only)

[alystair]

Describe the feature you want:
Option to visibly hide all OTP codes in popup, click-to-copy should still function as normal by clicking issuer/account name.

Why do you want this feature in Authenticator?
I frequently demo systems that require OTP input as only login method, however for larger crowds this dramatically increases the possibility of an opportunistic shoulder-surfing attack. Hiding the codes negates this issue.

[vwbusguy]

Wouldn't they also need to figure out your password before said token expires? This seems like an unlikely scenario.

[alystair]

For projects that use OTP as main login method

[KharmaScribbles]

By the time the snooper gets around to entering your code, wouldn't it be expired since they are time-based?

[mymindstorm]

TOTP is designed to be the second factor, not the first and only. Whatever system you're using is weird.

[alystair]

Popular open source Android app andOTP has this exact feature

[erayerdin]

and FreeOTP+ also has this feature

[ipkpjersi]

I checked out this extension today and I was surprised to see that it had basically every feature I would ever want except for this one feature. While not strictly necessary, I feel like this would still be a really nice feature to have. It's a pretty common feature among OTP software, so I'd love to see it here too.

[Sneezry]

I will try to implement this feature in the next release.