extract_otp_secrets

Some time ago I realised how vulnerable I was keeping all my TOTPs in Authenticator __only__, in the event of losing/breaking my device (and no, there is no way I would sync them to Google cloud). This taught me few things: - there isn't much to Authenticator and TOTPs in general, it's just a secret, which can be shared across multiple TOTP managers and devices. I had solved the "single point of failure" concern - that opened a new need for "safe TOTP replication with offline access", and that's how I ended-up running my own vaultwarden instance and using the bitwarden clients across devices. I'm glad I did, and I can't recommend it more. IIRC, this¹ helped tremendously along the way. ¹: https://github.com/scito/extract_otp_secrets

This library uses the GPL v3 license: https://github.com/scito/extract_otp_secrets?tab=GPL-3.0-1-o... Your options are to either go open-source or remove the .proto file.

I have been using Authy on desktop to generate TOTP for 2FA. Recently got a message that they are shutting down the desktop client. I tried looking for a stand-alone and simple (as simple as Google Authenticator) app for Windows but did not find any, so I built one myself. It can generate Time-based OTP and can also import the QR code exported from Google Authenticator. Currently it supports only TOTP because that's what most services seem to use. The app utilises - OTP.Net for TOTP generation https://github.com/kspearrin/Otp.NET ZXing.Net for reading QR codes https://github.com/micjahn/ZXing.Net QRCoder for creating QR codes https://github.com/codebude/QRCoder Google protobuf for reading Google QR code protobuf message https://github.com/protocolbuffers/protobuf Utilising .proto file from https://github.com/scito/extract_otp_secrets

Google Authenticator has supported manual device transfer for some time via QR code. You can decode these application-specific QR codes for backup or transfer purposes using a third-party tool: https://github.com/scito/extract_otp_secrets

You can extract plaintext secret keys from google authenticator app and store them in user friendly format/password manager https://github.com/scito/extract_otp_secrets