keepass2android VS decrypt-otpauth-files

On Android, I use Keepass2Android [1]. It is open source, is updated frequently enough, and it's compatible with my Yubikey-backed databases.

Yubikey Challenge-Response for KeePassXC needs its own setting though, as KeePassXC made some design decision that is incompatible with KeePass, IIRC.

[1] https://github.com/PhilippC/keepass2android/

For the paranoid, there's always KeePass + cloud storage, which is also free. It's what I use. I tend to use KeePassXC, a cross-platform KeePass-compatible application that works on Linux, Mac, and Windows, and I use Dropbox free for my cloud storage, since it actually has a Linux client that works, no hassles, right out of the box. I use KeePassium on my iPhone, and there are plenty of Android KeePass-compatible apps out there, such as KeePassDX, which is open-source and, apparently, very nice. I USED to use KeePass2Android, which the community seems to still like, but I'd probably be using KeePassDX these days since it's fully open-source and available through F-Droid.

I use KeepassXC password manager[1], it keeps my TOTP information and makes it available to use on all my devices. It syncs between my devices using Dropbox. Kepassium[2] makes it available on iOS, and Keepass2Android[3] makes it available on Android. It also manages my SSH keys and adds them to the ssh-agent, even on Windows. and houses a backup of my GPG keys. I even found that it can manage my credentials for use in scripts and git using git-credential-keepassxc[4].

Similar functionality can be had from 1Password[5], of you're into the more fancy experience. As a bonus this approach makes it very easy to store all those backup codes that dotp services often give you. Won't help your current predicament but will prevent it from happening again :)

1: https://keepassxc.org/

2: https://keepassium.com/

3: https://github.com/PhilippC/keepass2android

4: https://github.com/Frederick888/git-credential-keepassxc

5: https://1password.com/

I remember reading there was some issues bringing the KeePass2Android offline version up to the regular KeePass2Android version: https://github.com/PhilippC/keepass2android/issues

Looks like keepass2android has had 3 updates in 2022 so far (the link is to the most recent).

I used OTP Auth.app (https://cooperrs.de/otpauth.html) for many a while years on iOS and then on macOS too.

Now I've mostly transitioned to using the built in OTP handling in Keychain. Every so often I find one I haven't migrated across yet.

Another option is HE's NetWork Tools iOS app, which also has an OTP Authenticator in it. I believe it's a lot less integrated though (I don't think it provides a browser plugin, for example).

Forget all the cloud-based Authenticators and use OTP Auth. https://cooperrs.de/otpauth.html

I have been using OTP Auth for a while. It doesn't get updated a lot but it's working fine.

https://cooperrs.de/otpauth.html

I do that using a separate app, (OTPAuth for iOS), and pretty much for the same reason.

OTP Auth Website

Good point. See also the developer's website: https://cooperrs.de/otpauth.html

Sure, that's a possibility. I believe it is developed by a single person. But the OTP Auth app allows you to export an encrypted backup that can be decrypted using an open source tool available here: https://github.com/CooperRS/decrypt-otpauth-files. Also, the OTP Auth app lets you view the original secrets (and display QR codes) used to create the TOTP entries. So it would be relatively easy to simply scan the QR codes with whatever new app you wanted to use in the future. In my book, that makes OTP Auth the safest option because I am guaranteed an easy way to migrate to a new app if I ever need to do so. ... Also, OTP Auth lets you have folders (in addition to searching), which is really helpful if you have a lot of 2FA accounts.

This is the best iOS answer. One of my most favorite apps. https://cooperrs.de/otpauth.html

OTP Auth. https://cooperrs.de/otpauth.html For iOS and macOS