Hi. Basically, I’m asking for suggestions. Do you know any good 2FA app that works on linux desktop? I’m looking for something that I can use instead of Aegis, Google authenticator, or microsoft authenticator, but in my computer. Note: It’d be great if it is open source but I’m not closed to proprietary apps, as long as they work on linux

  • seth@lemmy.world
    1·
    10 hours ago

    Assuming you had the secrets stored in a secrets.json file in your home directory in this format:

    {
  "github": "github2FAsecretKey",
  "some_other_account": "2FAsecretKeyForSomeOtherAccount"
}

    You could make a simple otp.py script and basic TOTP library to generate them in a script & copy them to clipboard:

    #!/usr/bin/env python3

import json
from pyotp import TOTP
import os
from sys import argv

try:
  file = json.load(open(os.path.join('/home','username','secrets.json')))
  if len(argv) > 1:
    totp = TOTP(file[str(argv[1])])
    code = totp.now()
    cmd = 'cb cp $(echo %s | tr -d "\n")' % code
    os.system(cmd)
  else:
    print(f"Available args:\n  {'\n  '.join(list(file.keys()))}")
except Exception as e:
  print(f'Error in OTP: {e}')

    Then you just alias otp='f() { $HOME/otp.py $1 };f' in your shell profile/rc and call it with e.g. otp some_other_account or just otp if you forget what key names you gave them to get a reminder list. Obviously you’d want to replace the JSON plaintext file load with an actual secret store if you’re not a lazy madman. I am a lazy madman.

    Edit: when I stop being lazy I will probably switch to that [email protected] suggestion below (pass + pass-otp extension).

    • Blueteabag@sh.itjust.works
      1·
      10 hours ago

      This and since many don’t know if the sync option is optional aka you can also keep everything local is you want to

  • manuel2258@lemy.lolEnglish
    1·
    1 day ago

    Another idea if you are willing to spend some money is to get a yubikey. Then the tokens are stored on a separate hardware key and it has great android and Linux apps to access codes

  • Kyle@lemdro.idEnglish
    2·
    2 days ago

    If you use Gnome and Flatpaks there is an app called Authenticator on Flathub

  • solrize@lemmy.world
    21·
    2 days ago

    What exactly do you want it to do? You can implement TOTP with a 10 line python script and I probably have a few of those kicking around. I’ve ended up doing that at least a couple of times.