KeyGlint / The manual
Support.
A few answers to get you going. KeyGlint works on macOS 14 or later, right from the key icon in your menu bar.
Where is the app after I open it?
Click the KeyGlint key icon in the macOS menu bar. KeyGlint doesn’t open a main window or show an icon in the Dock. Use the gear button for Settings and the power button to quit.
How do I add or import an account?
Use New Account to enter a service’s TOTP setup secret or paste its otpauth link. To import QR images, open Settings → Accounts → Import QR images. For a Google Authenticator export split across multiple QR images, select all images together.
Select up to 100 images at once, each no larger than 32 MiB. Use still images for long animations, and crop very large screenshots around the QR code. You can cancel an import while images are being read. KeyGlint supports TOTP periods from 1 to 86,400 seconds.
Keep access to your original authenticator until you have verified that the imported codes work. SMS codes and push approval requests are not supported.
How do I copy a code, and why is it hidden?
Click an account to copy its current code. Codes are hidden by default; turn on Settings → Codes → Show codes to display them. Search by account name or service to find a code quickly.
KeyGlint clears a copied code shortly before it expires if the clipboard still contains that code and the app remains running.
Why is a service rejecting my code?
Check that your Mac’s date and time are set automatically, then copy a fresh code. Make sure you selected the correct service and account. If you recently imported an account, compare it with your original authenticator before making any changes.
How do backups and restore work?
Open Settings → Accounts → Back up and choose a passphrase of at least eight characters. Store the backup and passphrase safely. KeyGlint does not save your passphrase and cannot recover it.
A backup contains the accounts present when you continue from the passphrase prompt; its success count reflects that snapshot. Create another backup if you add accounts afterward.
Restore imports accounts from an encrypted KeyGlint backup without replacing matching accounts already present. Backup files up to 64 MiB are supported. If you save a backup in a cloud-synced folder, your storage provider handles that file.
What should I do if the vault is unavailable?
KeyGlint preserves the saved data and blocks changes when it cannot read its vault. Unlock your Mac’s Keychain, then open Settings → Accounts → Retry.
If reading still fails, keep existing backups. Do not delete Keychain items as a troubleshooting step.
How do I remove an account?
Select the account and use Remove Account from its actions. Removing an account from KeyGlint does not disable two-factor authentication at the service, so keep another way to sign in. Delete old backups separately when you no longer need them.