OTPClient VS andOTP

My problem is that Aegis (open source) does not have a Linux app so I have to use an alternative. I found OTPClient, and it seems to fit the bill for a privacy concerns, but I can't figure out how to add it in PayPal as a second device to authenticate with.

If so, check out OTPClient.

Otpclient keep password manager and totp separate .

You can export your secret keys from Aegis, then import them into OTPClient if you want to use it on Desktop. That's the benefit of Aegis being FOSS. Your are not locked in to only using their products.

You didn't share your OS, but on Linux you could use Authenticator or OTPClient. If you want something cross-platform that will sync to multiple devices like Authy, you could give TokenVault in Standard Notes a try.

Expanding on the recommendations here, if you have some old laptop laying around (or can buy one on the cheap off e.g. Craigslist or something), you could install some Linux distro on it, install an OTP generator app (e.g. OTPClient, and then disconnect it from the network entirely. This would probably be considerably more secure than even using a phone, since the only way for someone to steal your TOTP keys would be to have physical access to the machine (and even that can be mitigated, seeing as how any reasonably-modern Linux distro will support full-disk encryption).

OTPClient is what I use. The source code is on github here

You can use otpclient https://github.com/paolostivanin/OTPClient

I love F-Droid and try to use apps from there whenever possible.

I did recently discover that andOTP is no longer maintained, though. I've switched to Aegis since.

https://github.com/andOTP/andOTP

I use andOTP[0] which auto-exports an encrypted backup to a local folder, which is then synced with Syncthing[1] to my NAS.

It's seamless and doesn't need an internet connection.

- [0]: https://github.com/andOTP/andOTP

- [1]: https://syncthing.net/

- AndOTP github project is archived in june 2022: https://github.com/andOTP/andOTP

I used FreeOTP before that, which is also fine. I switched because maintenance had been fairly uncommon and there were some minor issues bugging me, but it seems to have picked up again recently, and it's backed by Red Hat as an entity for better or for worse. andOTP is officially deprecated, so I recommend switching to either of those.

At the moment this works with encrypted backup files from andotp and aegis and it totally fullfills my lazyness needs. :)

I was happily using andOTP but seems like it has been unmaintained since June - https://github.com/andOTP/andOTP.

I wish F-Droid or Play Store had a feature like GitHub's 'Archived' to inform users.

You can use whatever 2FA you want, but you need to extract the secret key for it using some scripts. i did it a while ago and i have both blizzards and steams 2fa on Aegis on android, also works in KeepassXC. I think the 2fa app needs to have support for it but it works. https://github.com/andOTP/andOTP/wiki/Shared-secrets

I would switch to andOTP since it allows you to export the keys.