extract_otp_secrets
gauth
extract_otp_secrets | gauth | |
---|---|---|
10 | 5 | |
976 | 305 | |
- | - | |
8.5 | 3.4 | |
7 days ago | 3 months ago | |
Python | Go | |
GNU General Public License v3.0 only | ISC License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
extract_otp_secrets
-
Show HN: AuthWin – Authenticator App for Windows
This library uses the GPL v3 license: https://github.com/scito/extract_otp_secrets?tab=GPL-3.0-1-o...
Your options are to either go open-source or remove the library.
-
Google Online Security Blog: Google Authenticator now supports Google Account synchronization
I used https://github.com/scito/extract_otp_secrets to export the keys from the Google Authenticator and imported them manually into Bitwarden.
- Migrating from GA to YA
-
Tell HN: It is impossible to disable Google 2FA using backup codes
You can extract plaintext secret keys from google authenticator app and store them in user friendly format/password manager
https://github.com/scito/extract_otp_secrets
-
Fluent GlowUI Design desktop 2FA client for Windows 11/10 on Store for free & open source
you can actually export them using tools like this one
-
Good enough security?
I recently switched from Google Authenticator to Raivo and I used the export option in google auth and this tool to get the seeds.
-
how to transfer all my 2FA codes from google authenticator to authy
Getting the code out of Google Authenticator is not trival. If you are good with python, someone has written a script to do that https://scito.ch/content/extract-secret-keys-google-authenticator-qr-export. However, with 17, you may be better off just doing it manually.
-
Is it possible in Yubico Authenticator App to scan the exported QR codes from Google Authenticator App?
Try this: https://scito.ch/content/extract-secret-keys-google-authenticator-qr-export
-
Ask HN: Why is today's Internet experience so user hostile?
I was able to take a screenshot of GAuth backups on iPhone using the button hotkeys(IE: Power+Volume up). I setup a container that runs a go version of GAuth and used a python script to decrypt the (decrypted QR code) backup keys. Then I backed up the encrypted keyfile to offline disk, encrypted the container backup and deleted it from the hypervisor.
https://github.com/pcarrier/gauth
https://github.com/scito/extract_otp_secret_keys
-
Google auth/ Authy transfers to yubikey
I used the "zbarimg" command line tool to get the inputs for the following Python tool (see README for instructions) from each QR code exported from Google Authenticator. https://github.com/scito/extract_otp_secret_keys
gauth
- Aegis Authenticator – Secure 2FA App for Android
-
TOTP tokens on my wrist with the smartest dumb watch
I use https://github.com/pcarrier/gauth
It relies on file permissions so is not exactly robustly secure (no idea about RAM vulnerabilities etc).
As per the author, I consider my laptop the fundamental point of vulnerability. If someone else gets access to it, I'll know and I'll hit the metaphorical panic button :)
- Ask HN: Does anyone else think this 2FA everywhere is getting out of hand?
-
Ask HN: Why is today's Internet experience so user hostile?
I was able to take a screenshot of GAuth backups on iPhone using the button hotkeys(IE: Power+Volume up). I setup a container that runs a go version of GAuth and used a python script to decrypt the (decrypted QR code) backup keys. Then I backed up the encrypted keyfile to offline disk, encrypted the container backup and deleted it from the hypervisor.
https://github.com/pcarrier/gauth
https://github.com/scito/extract_otp_secret_keys
-
A simpler and safer future – without passwords
> A future without passwords
No, thank you, especially if Google is going to be the gatekeeper.
https://github.com/pcarrier/gauth FTW
What are some alternatives?
totp-cli - A cli-based pass-backed TOTP app.
ios-application - A native, lightweight and secure one-time-password (OTP) client built for iOS; Raivo OTP!
otpauth-migration-decoder - Convert otpauth-migration to plain link
google-authenticator - Open source version of Google Authenticator (except the Android app)
android-otp-extractor - Extracts OTP tokens from rooted Android devices
totp-cli - Authy/Google Authenticator like TOTP CLI tool written in Go.
google-authenticator-exporter - Get the TOTP secrets exported by Google Authenticator
scrcpy - Display and control your Android device
tpm2-totp - Attest the trustworthiness of a device against a human using time-based one-time passwords
twrpdtgen - A Python library/script to automatically generate TWRP-compatible device tree from a boot/recovery image
ArubaOTP-seed-extractor - Extract TOTP seed instead of using ArubaOTP app