CodeSpray icon
CodeSpray
OPEN SOURCE · MIT · ANDROID 8.0+

Verification codes,
in a draggable bubble.

CodeSpray catches codes from SMS and app notifications, copies them to the clipboard, and pops up a bubble. Long-press the code and drag it onto any text field to paste it there.

Free · ~237 KB · No account · No tracking · 12 languages

How it works: a code arrives, the bubble pops up, you drag it onto the field. (Schematic demo, not a screen recording.)

Everything it does

One small app, no heavy libraries, plain Java. Every feature below is in version 1.0.

✉

SMS detection

Listens for incoming SMS messages containing a verification code.

🔔

Notification detection

Catches codes from app notifications too, not just SMS.

📋

Auto-copy

Detected codes are copied to the clipboard automatically.

🔮

Drag-and-drop bubble

Drag the bubble to move it. Long-press the code and drop it onto a text field to paste. Tap to copy again. Auto-closes after 90 seconds.

📌

Clipboard watching

A bubble also appears for any number you copy anywhere on the device.

📝

Code notifications

A notification shows the code, with Copy and Ignore actions.

📁

History

The last 50 detected codes, with time, source and message snippet. Copy again or delete per entry.

✎

Editable phrase lists

Sensitive, ignored and cleanup phrases are editable, in 12 languages, with regex matching.

🚫

Ignored apps & senders

Ignore codes from selected apps or SMS senders.

📡

Broadcast option

Optionally broadcasts detected codes for automation apps.

🔒

Sensitive clipboard

Optionally marks clipboard entries as sensitive on Android 13+.

🌙

Light & dark mode

Glass-style design with a light/dark toggle, remembered across launches.

📱

Per-brand battery shortcut

One tap to the right background-battery page for Samsung, Xiaomi, Huawei, Oppo, Vivo and others.

✓

Ready notice + test

When tracking starts, a "You're ready" notice appears and a test notification arrives 10 seconds later.

How it works

Three steps, then you never type a code by hand again.

1

Grant 5 permissions

SMS, send notifications, read notifications, display over other apps, and battery exemption. The big start button stays dimmed until all five are granted.

2

Start tracking

Tap the start button at the top. A "You're ready" notice appears, and a test notification arrives 10 seconds later so you can leave the app and see it work.

3

Drag the code

When a code arrives, the bubble pops up. Drag the code onto the field to paste it. If a field refuses drops, tap the code to copy it instead.

Permissions, explained

Nothing here is used for anything but catching codes on your device.

PermissionWhy it is neededRequired?
Receive SMSDetect codes in incoming text messages.Yes
Send notificationsShow code alerts and the test notification.Yes
Read notificationsDetect codes in app notifications.Yes
Display over other appsDraw the draggable bubble on top of other apps.Yes
Ignore battery optimizationKeep tracking alive in the background.Yes
Per-brand battery pageShortcut to your brand's own battery settings.Optional
Restricted settingsNeeded on some devices to grant the above.Optional

Privacy

The whole point of CodeSpray is that your codes never leave your phone.

🔒

No internet permission

The app literally cannot send anything anywhere. There is no server, no account, no analytics.

📄

Everything on-device

Detection, clipboard, history and settings all live on your phone. History auto-cleans after 30 days if you enable it.

</>

Open source

MIT licensed. Read every line, build it yourself with the included script, no Gradle required.

Questions, answered

Does CodeSpray upload my codes anywhere?

No. It has no internet permission. Codes are detected on your device, copied to your clipboard, and kept in a local history. Nothing leaves your phone.

What if a field refuses the drop?

Some fields (banking apps, some web forms) reject drag-and-drop. Tap the code in the bubble to copy it, then paste normally. That always works.

Is it on Google Play or F-Droid?

Not yet. Right now it is distributed from GitHub. The APK here is signed with the same key as every previous version, so future updates install over it.

Which Android versions work?

Android 8.0 and newer. On Android 15+, an extra note with two copyable ADB commands appears for enhanced notifications.

How do I automatically copy OTP codes on Android?

CodeSpray detects verification codes from SMS and app notifications and copies them to the clipboard automatically, so you can paste them without typing. The draggable bubble gives you the code on screen as well.

Is there an app that lets me drag a verification code into a field?

Yes. CodeSpray shows a draggable bubble with the code. Long-press the code and drop it directly onto the text field to paste it. If a field refuses drops, tap the code to copy it instead.

Download CodeSpray 1.0

Free, open source, ~237 KB. Requires Android 8.0 or newer.

APK SHA-256:
9f1702b2ada6a6f0f104e729c1e2d1120ced23bf8137d51c364c3dfa280e5294

Signing certificate SHA-256:
be99f7966d997ce81fbb64978d04346718658c8926b0746cd960d60392ef04e9

VirusTotal scan (5 Nov 2026): 1 of 67 engines flagged this file (K7GW: Riskware, a generic PUA label); the other 66 found nothing. View full report

Also on GitHub Releases · Source: lunrofi/codespray