[kwlug-disc] MFA security keys

[Khalid Baheyeldin]

On Tue, Oct 1, 2024 at 1:06 AM Chris Frey <cdfrey at foursquare.net> wrote:
>
> On Mon, Sep 30, 2024 at 11:57:37PM -0400, Paul Nijjar via kwlug-disc wrote:
> > Are there other things I should be considering?
>
> I just use the command line oathtool on Debian for TOTP support.

Same here ...

On my Android phone, I have FreeOTP+ which can read a QR code from
a site and add it to the app, so you can get time based OTP whenever
you want.

Then on my laptop:

$ sudo apt install oathtool

To make things easier, I have shell script wrapper that looks up a site
name in a file that has the hash keys, and returns a time based OTP.

That file is on my laptop and my home server, and I remember to
keep them in sync when adding or updating a new site on my phone.