Register a Host
On the device that receives the emails, add the account to watch — Gmail, Microsoft, or any IMAP server — and the service it belongs to.
Verification code delivery
Verification codes,
wherever you are.
The code lands in an inbox on one device — you need it on another.
Valider finds it there and hands it to the device in front of you.
WORKS WITH
- Gmail
- Outlook
- Office 365
- Hotmail
- Any IMAP server
How it works
Three steps,
then it just works.
Pair with approval
Enter the host's token on your other device. The host shows an approval request for 60 seconds — only devices you approve can ever receive a code.
Request & receive
Tap send when a code is on its way. The host searches recent unread mail, extracts the code or verification link, and pushes it straight to your screen.
Any mailbox
Your email, your way.
Connect Gmail with read-only access, sign in to Outlook, Office 365, or Hotmail with your Microsoft account, or point Valider at any IMAP server over SSL, TLS, or STARTTLS.
- Gmail — official API, read-only scope
- Microsoft sign-in for Outlook & Office 365
- Custom IMAP host, port, and security type
GGmailRead-only
MOutlook / Office 365OAuth
@imap.yourserver.comSSL · 993
Pattern matching
Finds the code in any email.
Every service words its emails differently. Teach Valider once: mark where the code sits with {code} — or the verification link with {link} — and skip the noise with {***}. Share patterns between devices as preset files.
- Codes or sign-in links, any wording or language
- Only unread mail from the last 24 hours
- Export & import presets per service
Approval pairing
Nothing moves without a yes.
Pairing starts with a token you copy from the host — and ends with an explicit approval on the host's screen. Requests expire after 60 seconds, and you can disconnect any device at any time.
- 60-second approval window
- Approve or reject each device, per service
- One request at a time — no silent queues
Approval Request
A device wants to receive codes for Adobe.
Expires in 42s
Approve
Reject
Delivery you can trust
Know what happened to every code.
Each delivered code opens full-screen with its own expiry countdown, and a verification link arrives ready to open or copy. Mark it as submitted when you've used it — the host sees submitted, pending, and cancelled states for every device, with recent activity on the home screen.
- Full-screen code with live countdown
- Links open in a built-in browser, or copy in one tap
- Nothing is re-sent within 24 hours of being submitted
- Arrives as a notification when the app is closed
Adobe · 892104Submitted
Google · 731852Pending
Slack · Sign-in linkSubmitted
Apple · 218347Cancelled
Security
Built like it holds your keys.
Because it does.
Your mail is searched on your own device. What travels is the code or link — nothing else.
6-digit PIN
The app opens with your PIN, and settings stay behind it. No PIN, no data.
AES-256-GCM
Email credentials are encrypted with a key derived from your PIN — PBKDF2, 100,000 rounds.
Hardware-backed keys
The session key is wrapped by the Android Keystore and never leaves this installation.
No account, no sign-up
Devices authenticate anonymously. Valider never asks who you are.
Mail stays home
Message bodies are never uploaded. Only the extracted code or link and the service name are delivered.
Read-only by design
Gmail is accessed with the read-only scope. Valider can look — it can never touch.
And more
The details are covered.
Encrypted backup
Export everything as a single file, locked with your PIN. App-specific encryption — not a ZIP password.
Device transfer
Moving phones? Carry your hosts and paired devices over in one import — connections survive the move.
Service presets
Package a service's sender, pattern, icon, and expiry as a preset file and reuse it on any device.
Light & dark
Light, dark, or follow the system — the whole app, including the code screen, adapts.
Get started
Stop retyping codes.
Free on Android. Set up your first host in minutes.