Vault & MFA Authenticator

Snipset includes a fully isolated, built-in Multi-Factor Authentication (MFA) module. This allows you to generate and inject your 6-digit TOTP (Time-based One-Time Password) codes directly into any application exactly when you need them, without needing to pull out your phone.

Accessing the MFA Dashboard

To manage your accounts, open the main Snipset window and navigate to Vault in the left sidebar (previously labeled MFA). The Vault now unifies TOTP codes, passwords, secure notes, and generated passwords.

• Accounts: View all your saved MFA accounts, copy their current codes, or manage their details.
• Import: Add new accounts manually or via URI.
• Settings: Synchronize your system clock with NTP servers to ensure your codes are always accurate.

Adding Accounts

You can add a new MFA account from the Import tab in two ways:

• Manual Entry: Enter the Alias (the trigger keyword you will use), Issuer, Account Name, and the Secret Key provided by the service.
• URI Import: Paste a standard otpauth:// URI (often obtained by decoding a setup QR code) to import the account automatically.

Triggering MFA Codes

The fastest way to use your MFA code is by typing its assigned trigger anywhere on your computer.

• Simply type mfa-<alias> (for example, mfa-github).
• Snipset will intercept the text, generate the current 6-digit code, and inject it instantly into your active window.

Magic MFA Menu

If you forget your alias, you can use the dedicated Magic MFA overlay.

• Press Ctrl+Shift+M from anywhere to open the Magic MFA menu.
• Search for your account by name or issuer.
• Press Enter to inject the code directly, or Ctrl+C to copy it to your clipboard.

Security and Privacy

Security is the top priority for the MFA module. It is strictly isolated from the rest of Snipset.

• Encrypted Vault Storage: MFA secrets and vault items are stored in Snipset's isolated SQLite stores (snipset-mfa / snipset-vault), with OS keychain integration and optional PIN/biometric (Windows Hello) lock. See the new Vault page for PIN, trash/restore, Google Passwords CSV import, password generator (Ctrl+Alt+P), Secure Send, and autofill (Ctrl+Shift+U).
• Offline Operation: TOTP generation is performed entirely offline. The only network request is the optional NTP time sync if your clock drifts. Time can be synced from Vault → Settings → Sync Time.