pass-grave VS pass-otp

Also, you might be interested in pass-grave. I recently raised a PR make it somewhat better than it is right now. Instead of using tomb which in turn relies on a bunch of external dependencies, pass grave simply uses gpg which is already used by pass. It also doesn't need root access to do anything.

otp tokens are included in the encrypted file. It’s just appended to the file, e.g. otpauth://totp/… You’ll need to install https://github.com/tadfisher/pass-otp on desktop for this to work. But the android client comes with support builtin.

I use pass myself. I had no idea you could use it for otp. Are you using something like this? https://github.com/tadfisher/pass-otp

I use https://github.com/tadfisher/pass-otp with pass, which has a FOSS client for desktop and smartphone (at least for andriod, no idea for ios)

There are the password manager pass (https://www.passwordstore.org/), which has an extension pass-otp (https://github.com/tadfisher/pass-otp). This extension can be used instead of Google Authenticator.

> In particular, I don't see how 2FA is possible with this

Umm, why not?

First, you can use a different app (like aegis) to generate OTPs.

Second, pass has an extension (https://github.com/tadfisher/pass-otp) that can be used to generate OTPs.

You can use pass

I also use this for OTP tokens instead of my phone!

https://github.com/tadfisher/pass-otp

generate OTP if pass-otp is installed (although I'm not sure if generating OTPs on the same device where you have your passwords is a good idea)

If you're using pass already you could use their OTP plugin:

https://github.com/tadfisher/pass-otp

That gives you "pass otp github.com", etc. You can also export the QRcode, and do similar things.

I put together a simple distribution of pass with a couple of plugins I use, including otp, which is easy to setup - just clone beneath `/opt/pass`:

https://github.com/skx/pass