CodeBubble catches codes from SMS and app notifications, copies them to the clipboard, and pops up a bubble. Long-press the code and drag it onto any text field to paste it there.
How it works: a code arrives, the bubble pops up, you drag it onto the field. (Schematic demo, not a screen recording.)
One small app, no heavy libraries, plain Java. Every feature below is in version 1.0.
Listens for incoming SMS messages containing a verification code.
Catches codes from app notifications too, not just SMS.
Detected codes are copied to the clipboard automatically.
Drag the bubble to move it. Long-press the code and drop it onto a text field to paste. Tap to copy again. Auto-closes after 90 seconds.
A bubble also appears for any number you copy anywhere on the device.
A notification shows the code, with Copy and Ignore actions.
The last 50 detected codes, with time, source and message snippet. Copy again or delete per entry.
Sensitive, ignored and cleanup phrases are editable, in 12 languages, with regex matching.
Ignore codes from selected apps or SMS senders.
Optionally broadcasts detected codes for automation apps.
Optionally marks clipboard entries as sensitive on Android 13+.
Glass-style design with a light/dark toggle, remembered across launches.
One tap to the right background-battery page for Samsung, Xiaomi, Huawei, Oppo, Vivo and others.
When tracking starts, a "You're ready" notice appears and a test notification arrives 10 seconds later.
Three steps, then you never type a code by hand again.
SMS, send notifications, read notifications, display over other apps, and battery exemption. The big start button stays dimmed until all five are granted.
Tap the start button at the top. A "You're ready" notice appears, and a test notification arrives 10 seconds later so you can leave the app and see it work.
When a code arrives, the bubble pops up. Drag the code onto the field to paste it. If a field refuses drops, tap the code to copy it instead.
Nothing here is used for anything but catching codes on your device.
| Permission | Why it is needed | Required? |
|---|---|---|
| Receive SMS | Detect codes in incoming text messages. | Yes |
| Send notifications | Show code alerts and the test notification. | Yes |
| Read notifications | Detect codes in app notifications. | Yes |
| Display over other apps | Draw the draggable bubble on top of other apps. | Yes |
| Ignore battery optimization | Keep tracking alive in the background. | Yes |
| Per-brand battery page | Shortcut to your brand's own battery settings. | Optional |
| Restricted settings | Needed on some devices to grant the above. | Optional |
The whole point of CodeBubble is that your codes never leave your phone.
The app literally cannot send anything anywhere. There is no server, no account, no analytics.
Detection, clipboard, history and settings all live on your phone. History auto-cleans after 30 days if you enable it.
MIT licensed. Read every line, build it yourself with the included script, no Gradle required.
No. It has no internet permission. Codes are detected on your device, copied to your clipboard, and kept in a local history. Nothing leaves your phone.
Some fields (banking apps, some web forms) reject drag-and-drop. Tap the code in the bubble to copy it, then paste normally. That always works.
Not yet. Right now it is distributed from GitHub. The APK here is signed with the same key as every previous version, so future updates install over it.
Android 8.0 and newer. On Android 15+, an extra note with two copyable ADB commands appears for enhanced notifications.
CodeBubble detects verification codes from SMS and app notifications and copies them to the clipboard automatically, so you can paste them without typing. The draggable bubble gives you the code on screen as well.
Yes. CodeBubble shows a draggable bubble with the code. Long-press the code and drop it directly onto the text field to paste it. If a field refuses drops, tap the code to copy it instead.
Free, open source, ~237 KB. Requires Android 8.0 or newer.
APK SHA-256:5009c19cf88450cad42c059488eee4046f81d97ddfaf6006f2fecee93a9d6140
Signing certificate SHA-256:be99f7966d997ce81fbb64978d04346718658c8926b0746cd960d60392ef04e9
VirusTotal scan (5 Nov 2026): 1 of 67 engines flagged this file (K7GW: Riskware, a generic PUA label); the other 66 found nothing. View full report