4 ms·
Hi David, I built exactly this: https://github.com/yeo/bima https://github.com/yeo/bima I stored everything into a SQLite in `~/.bima/bima.db` Your OTP secre
by kureikain 7y ago
Hi David,
I built exactly this: https://github.com/yeo/bima https://github.com/yeo/bima
I stored everything into a SQLite in `~/.bima/bima.db`
Your OTP secret is encrypted using a master password that you chooese. I use AES GCM for encryption: https://github.com/yeo/bima/blob/master/shield/encrypt.go#L19-L31 https://github.com/yeo/bima/blob/master/shield/encrypt.go#L1...
You then has 2 options to backup/sync among device it:
1. backup that file using dropbox, icloud, google drive
2. Enable sync to my backend. You sync encrypted data, even me cannot see it. Then other device can sync from my backend, and you enter your master password to decrypt it.
Entire thing is open source, implement using Golang Fyne UI toolkit so it run across linux/mac/window/ios/android.
If you want to help beta test it, I can send you a beta build.
- dnr 7y agoI definitely want to keep 2fa secrets on a phone, not my laptop, otherwise it's not a true second factor. If you have an Android build to try, I'll check it out. Also, part of my ideal requirements is an app built by an entity that I trust as much as Google. Open source is great, and this app is simple enough that I can skim the code once, but I'm not going to do it for every update, and I might miss something. There's still something to be said for that kind of accumulated trust. (I might not trust Google as much as I used to, but I still keep my life on gmail, so I have to trust them pretty far.)