[kwlug-disc] Google with TOTP

[Raymond Chen]

Yes, the oathtool is cool. I use it to display my AWS OTP dynamically on
the touch bar of my MacBook.

On Wed, Jun 8, 2022 at 23:01 Khalid Baheyeldin <kb at 2bits.com> wrote:

> An update that makes TOTP extremely portable across devices.
>
> Basically when you pair a web site with a TOTP program (e.g. FreeOTP+
> Android App),
> the site displays a key, and uses a hashing method (e.g. SHA1). If you can
> get that
> key in another TOTP app, then it is free from the shackles of a certain
> device.
> That overcomes the scenario where your phone is lost or stolen.
>
> Linux has a command line TOTP program called oathtool, and there is an apt
> package in Ubuntu's repo by the same name.
>
> It is really simple to use. You only need to specify the key and key
> format (e.g.
> -b for base32, and the hash type, and off you go.
>
> $ oathtool -b --totp=sha1 KEYGOESHERE
> 123456
>
> Install it on your laptop, as well as a server, and store the key in a
> file that
> is readable only to your user, and it is done.
>
> Now the remaining step for me is to figure out how to pair Google with
> TOTP.
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20220609/dbc65090/attachment.htm>