How do you deal with TOTP 2-factor auth?

Question

I asked this on Mastodon too (https://fosstodon.org/@mort/111046321693058214), but it feels relevant for HN too.Since this github 2fa thing is happening, I'm gonna need a better solution for 2fa. So far I've used Authy on my phone for work stuff. That's fine. But for personal stuff, I want more control.What good open-source options do you all prefer to deal with TOTP? I'm thinking I'll use Bitwarden to sync TOTP keys, since I already use them for passwords, which means I need apps which let me freely and easily copy those secrets around. I use Linux, iOS and macOS, so I'll need apps for all those platforms.I'm not interested in moving to a different password manager, and I'm even less interested in moving to a closed source password manager. (Imagine that, handing all your passwords to some closed source application from some random US company in the name of security...)

dale_glass · Accepted Answer

You can try this: https://www.themooltipass.com/It's a hardware device with TOTP support. It works as an USB/Bluetooth keyboard and will type passwords for you.

makapuf · Answer

I use FreeOTP on mobile https://freeotp.github.io/ : it's another device than my computer (storing this on the same computer kind of defeats the purpose), Free, seems trustable, practical, works with all the sites that need it. (edit: link)

roosgit · Answer

Dealt with it a few hours ago. Because of GitHub, as well.
I chose KeePassXC on the desktop. It has a database which you can move around, backup it. There is an app for Linux and MacOS 10.13+ (because of Qt5). For iOS, a quick search shows up something called KeePassium.
These apps seem to work with a certain database format (kdbx), so for sync you might need to place the database somewhere online (iCloud, as an example). Otherwise, you might not need syncing if you don't add 2FA accounts to your database that often.

palashkulsh · Answer

I use oathtool to generate totp and copy it with xclip or pbcopy. You can take back up of this bash script anyway you like

mdwalters · Answer

I personally use Proton Pass' (browser extension and mobile app) OTP feature. Yes, it is (primarily) a password manager, but it can add OTP keys without a password. I would have reccommended GNOME Authenticator, but it corrupted my OTPs and couldn't start.

ajyey · Answer

1password and Raivo on iOS as a backup