Tessera

Two-factor codes,
kept honest.

Tessera is a private, open-source authenticator for macOS. A sleek menu-bar app and a first-class command-line tool, sharing one encrypted vault. No accounts. No tracking. Your secrets never leave your device.

Works with everything

Any TOTP service, plus HOTP and Steam Guard. Import from Google Authenticator, otpauth links, or QR codes — in bulk.

Yours alone

Secrets are encrypted on your device with argon2id + XChaCha20-Poly1305. No account, no servers, no telemetry.

CLI-first

A real command-line tool (tess) with a live terminal view — unique among Mac authenticators. Scriptable, with JSON output.

Menu-bar native

Touch ID unlock, on-screen QR scan, search, folders, and one-click copy — all from the menu bar.

Get Tessera

macOS app

Native menu-bar app with Touch ID. Coming to the Mac App Store.

App Store · soon

Command line

go install github.com/ibrahemid/tessera/go/cmd/tess@latest
tess vault init
tess watch