totp VS OTPClient

here's a command line one https://github.com/arcanericky/totp

TOTP never requires a phone number. On GitHub, they either show you a qr code you can scan in an app, or a text you can import. All apps support this sign up process, from google authenticator to console-based tools like totp[0].

Other 2FA may require phone numbers.

[0]: https://github.com/arcanericky/totp

I rolled my own by wrapping a UI around this awesome little go utility... https://github.com/arcanericky/totp

My problem is that Aegis (open source) does not have a Linux app so I have to use an alternative. I found OTPClient, and it seems to fit the bill for a privacy concerns, but I can't figure out how to add it in PayPal as a second device to authenticate with.

If so, check out OTPClient.

Otpclient keep password manager and totp separate .

You can export your secret keys from Aegis, then import them into OTPClient if you want to use it on Desktop. That's the benefit of Aegis being FOSS. Your are not locked in to only using their products.

You didn't share your OS, but on Linux you could use Authenticator or OTPClient. If you want something cross-platform that will sync to multiple devices like Authy, you could give TokenVault in Standard Notes a try.

Expanding on the recommendations here, if you have some old laptop laying around (or can buy one on the cheap off e.g. Craigslist or something), you could install some Linux distro on it, install an OTP generator app (e.g. OTPClient, and then disconnect it from the network entirely. This would probably be considerably more secure than even using a phone, since the only way for someone to steal your TOTP keys would be to have physical access to the machine (and even that can be mitigated, seeing as how any reasonably-modern Linux distro will support full-disk encryption).

OTPClient is what I use. The source code is on github here

You can use otpclient https://github.com/paolostivanin/OTPClient