5 ms·
If you want the quickest and dirtiest solution to your problem, then oathtool is for you: $ oathtool --totp -b "S3GXITTAZXNN4LCPXWQREDYBIE" 646063 Otherwi
by mmh0000 4y ago
If you want the quickest and dirtiest solution to your problem, then oathtool is for you:
$ oathtool --totp -b "S3GXITTAZXNN4LCPXWQREDYBIE"
646063
Otherwise, most password managers, i.e. Bitwarden, have integrated TOTP support.
- mooreds 4y agoDo you store the secret in your password manager? When a password manager has both the password and the secret for TOTP, that always seemed like it degraded the concept of multi-factor authentication to me.
- secabeen 4y agoPersonally, I don't, I explicitly and intentionally keep my Email, Password Manager and 2FA providers all distinct and separate. (This was very useful for extracting the TOTP secret out of the Symantec VIP 2FA system: https://github.com/dlenski/python-vipaccess https://github.com/dlenski/python-vipaccess) At work, we do for non-person accounts. It's non-ideal, but I don't want to manage two separate systems for storing that data and trying to keep them in sync. The password vault system itself has a hard requirement for 2FA to download the vault.
- mmh0000 4y agoConvenience and security are constantly at war with each other. I've decided that, for me, the risk of someone obtaining access to my password manager is very low. I've been using password managers since ~2000, randomly generated passwords; I've never had an account compromised. There's enough other sensitive information in my password manager that if someone did obtain access to it, I'd be fucked anyway, to the point that someone getting my TOTP secrets would be minor.
- marssaxman 4y agoThat looks promising! Thank you for the reference.