pass-otp

There's also the pass-otp extension that generates OTPs! https://github.com/tadfisher/pass-otp The pass android app is really nice too https://play.google.com/store/apps/details?id=dev.msfjarvis.... It also works in termux

I've been storing OTP secrets using `pass`[0] with `pass-otp`[1]. This does the whole symmetric encryption for me using `gpg`, decodes the URL for me to pass it into oathtool, and allows me to share the codes with my phone using Android Password Store[2]. This is all deceptively simple to set up, assuming you have a git server you trust to synchronize the codes with, or some kind of other method using maybe tailscale or syncthing? As long as you don't need the codes on Windows, where the QtPass app is unmaintained and can't generate OTP codes on Windows, you're mostly good. Oh and I use `zbarimg` to decode the QR, as I've integrated it with my screenshot script and it can decode more than just QR codes. [0]: https://www.passwordstore.org/ [1]: https://github.com/tadfisher/pass-otp [2]: https://f-droid.org/packages/app.passwordstore.agrahn

Just to add, 'pass' has an otp extension to simplify this a bit [1] With that, you can do $ zbarimg -q --raw qrcode.png | pass otp insert <some-name> $ pass otp <some-name> # or pipe to xsel [1] https://github.com/tadfisher/pass-otp

Ever so slightly easier to read (IMO) if you inline arguments: def hotp(key: bytes, counter: int, digits: int = 6, digest: Literal["sha1", "sha256", "sha512"] = "sha1"): mac = hmac.digest( key=base64.b32decode(key.upper() + "=" * ((8 - len(key)) % 8)), msg=struct.pack(">Q", counter), digest=digest, ) offset = mac[-1] & 0x0F binary: int = struct.unpack(">L", mac[offset : offset + 4])[0] & 0x7FFFFFFF return str(binary)[-digits:].zfill(digits) And Pyright doesn’t yell at this version because no type-changing variables here: https://basedpyright.com/?typeCheckingMode=all&code=JYWwDg9g... --- This is actually really helpful. I’m using Pass [1], which requires oathtool for OTP support [2]. I’m currently on a Mac without admin rights (so no Homebrew for me), and com

I solved this issue using pass-otp on my computers in addition to my mobile authentication app. This way my desktop, laptop, and mobile device all have the ability to generate my Bitwarden OTP code. https://github.com/tadfisher/pass-otp

A pass[0] extension called pass-otp[1] can produce otp codes from the command line > pass edit git/hub [... put in your totp ...] otpauth://totp/GitHub/... then you can > pass otp -c git/hub Copied OTP code for git/hub to clipboard. Will clear in 45 seconds. pass-otp is also compatible with the passff firefox plugin; not sure beyond that. [0]: https://www.passwordstore.org/ [1]: https://github.com/tadfisher/pass-otp

> https://github.com/tadfisher/pass-otp Seconded. The jerk maintainer needs to cut a release though. And maybe port it to something other than bash.

Password Store works fine for me: https://www.passwordstore.org/ https://github.com/tadfisher/pass-otp Others have also said Bitwarden isn't too bad: https://bitwarden.com/

TOTP seed migrations are a real pain. Its good to see Google offering a solution to that problem. I've moved to using the pass otp extension[0] which gives me secure storage of the totp seeds without being tied to a single device. [0]: https://github.com/tadfisher/pass-otp

I use pass myself. I had no idea you could use it for otp. Are you using something like this? https://github.com/tadfisher/pass-otp

I use https://github.com/tadfisher/pass-otp with pass, which has a FOSS client for desktop and smartphone (at least for andriod, no idea for ios)

> In particular, I don't see how 2FA is possible with this Umm, why not? First, you can use a different app (like aegis) to generate OTPs. Second, pass has an extension (https://github.com/tadfisher/pass-otp) that can be used to generate OTPs. Third, you can use something like oathtool to generate your otp using your totp secret oathtool -b --totp "your-totp-secret"

Huh, have you heard of the popular pass(1) extension pass-opt[1]? It allows one to get OTP secrets via a simple: pass otp secretname # Add -c for clipboard, as usual And because the OTP side is just a otpauth:// URL on a line of the GPG file, we can still use the rest of the secret for other things: pass secretname -c Real smooth! [1]: https://github.com/tadfisher/pass-otp