For desktop I personally use: https://github.com/arachsys/totp https://github.com/arachsys/totp It is a very simple application that can be reviewed quickly.

For desktop I personally use: https://github.com/arachsys/totp https://github.com/arachsys/totp It is a very simple application that can be reviewed quickly. I use it from a separate local account that does nothing else to make it at least a bit more second factor-y than a different application in the same account as the browser. You could use the scrypt utility on the data and "scrypt dec data.enc | ./totp" to get the TOTP.