Why use an authenticator app on your PC
Two-factor sign-in usually means stopping, finding your phone, unlocking it, opening an app and copying six digits by eye before they expire. If you sign in at a desk all day, an authenticator app for PC removes that whole trip. Desktop Authenticator generates the same time-based codes as a phone app, from the same setup keys, right on Windows.
The quickest path is the keyboard. Ctrl+Alt+Q opens a small search box from any program. Type part of a service name and Enter puts the code on your clipboard; Shift+Enter enters it for you in the box that had focus before. The clipboard copy is wiped from the clipboard after the time set in Clear a copied code after, and it never lands in Windows clipboard history.
In the main window, your front account shows on a key fob in big numerals over a countdown strip. During the last five seconds the next code is already shown underneath, so you are never caught typing one that has just expired.
How to add accounts: scan a QR code from your screen
Sites show a QR code when you turn on two-factor sign-in. On a PC there is no camera to point at it, so the app reads the screen instead.
- On the website, open the two-factor setup page until the QR code is visible.
- In the app choose Add account, then Scan a QR code on screen. Any monitor works, including light codes on dark pages.
- If the site gives a text link instead, use Paste a setup link. If it gives only a key, use Enter a key by hand and fill in Service, Account and Secret key.
- Type the current code back into the website to finish setup.
Moving 2FA codes from your phone to your PC
You do not have to turn two-factor sign-in off and on again for every site. Most phone authenticators can export accounts as a transfer QR code; put that code on your PC screen, for example by opening a photo of it, and Scan a QR code on screen reads the whole batch in one pass.
Do it in a quiet moment, and test before you trust. Sign in to each service once with a code from the PC, and only then remove the account from the phone, if at all. Keeping both is a reasonable choice: the same secret produces the same code on each device.
Write down where each site's recovery codes live before you move anything. They are the way back into an account if this PC is lost or replaced.
A TOTP authenticator locked to your Windows account
Lock when the app starts asks for Windows Hello before any code shows. Lock after the PC is idle for re-locks it after 1, 5, 15 or 30 minutes, an hour, or never, which covers stepping away from a shared office desk. On a PC without a camera or fingerprint reader, App passcode does the same job.
The desktop widget follows the same rules. Set its code to show Always, On hover or After Windows Hello, so a glanceable code on the desktop is a choice rather than a leak.
TOTP itself is simple: a shared secret plus the current time gives a short code that changes every period. Nothing about it needs a phone, which is why a PC can do the job as well as a pocket can.
