The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →
Top 16 Python Totp Projects
-
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
-
extract_otp_secrets
Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console.
-
full-stack-fastapi-postgresql
Full stack, modern web application generator. Using FastAPI, PostgreSQL as database, Nuxt3, Docker, automatic HTTPS and more. (by whythawk)
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
-
apache_2fa
Apache two-factor (2FA) authentication with Google Authenticator based on Time-based One-Time Password (TOTP) or HMAC-based one-time password (HOTP) Algorithms.
-
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
Can’t you just use a HOPT/TOPT so the user can scan a QR code with e.g google authenticator? Check https://github.com/pyauth/pyotp for more information
Project mention: PyPI announces mandatory use of 2FA for all software publishers | /r/programming | 2023-05-30Huh? Who is saying you need a smartphone? PyPi accepts TOTP as 2FA. TOTP is an open standard that has been around for at least a decade already and is very easy to implement, literally 20 lines of python. There are a ton of TOTP applications available, from CLI, to GUI on desktop systems, to Android apps, iOS, etc. If you have any device, be it a computer, phone, tablet, etc., which you do since you need one to publish the code from, you can easily generate TOTP codes. Heck, you could even do it by a hand on a paper.
Project mention: Show HN: AuthWin – Authenticator App for Windows | news.ycombinator.com | 2024-03-03This library uses the GPL v3 license: https://github.com/scito/extract_otp_secrets?tab=GPL-3.0-1-o...
Your options are to either go open-source or remove the library.
Project mention: Python implementation of the mobile Blizzard Authenticator (TOTP) | news.ycombinator.com | 2023-10-21
On the other end, I integrated TOTP into the auth workflow for a full stack FastAPI base project generator (https://github.com/whythawk/full-stack-fastapi-postgresql).
TOTP is great, but developers need to start adding it to their apps by default.
Yes, but it is quite uncomfortable to use, requiring you to get a session key and storing it somewhere. Instead, I've had good experiences with [rbw]. Maybe that would also be interesting for GP.
I've used to rbw for a rofi (and rofi-like frontend): https://github.com/fdw/rofi-rbw/
[rbw]: https://github.com/doy/rbw/
Project mention: Krptn: User Auth and Encryption of data at rest, derived from users’ credentials | news.ycombinator.com | 2023-09-12Hello, all!
Encryption and user authentication are crucial to cybersecurity.
Encryption can be implemented at various levels. I believe that handling encryption at the application level is the most secure since it decreases the attack surface. For example, the SQL server doesn’t get to see the plaintext.
Krptn is a piece of software I’m currently building which could be used as a user authentication service, which also handles encryption (at the application level) of the user’s associated data (e.g.: the users’ phone number).
(Krptn only has a Python API right now.)
It would run in the same server instance as your Python code, so no need to host anything new (decreased complexity) - just install the Python module and call the APIs.
For additional security, I designed the system to derive the encryption keys from the users’ credentials. This prevents an attacker who gains access to the database from being able to decrypt all the data since the encryption keys aren’t stored anywhere. Additionally, each user gets an asymmetric keypair. This enables users to share specific pieces of information with each other.
I know that, for many projects, this level of encryption is not required to secure their system and hence not everyone would benefit from using this. But I hope that for the people who do wish to have such security, this project will help.
It would be much appreciated if you would try this out. Please let me know what you think of this! Also please provide some feedback if you have any!
Here is an example Django integration: https://github.com/krptn/djangoExample
Here is an example Flask integration: https://github.com/krptn/flaskExample
GitHub repo: https://github.com/krptn/krypton
Project mention: Show HN: Alfred workflow for Yubikey OATH application (TOTP) | news.ycombinator.com | 2023-07-15
Project mention: Krptn: User Auth and Encryption of data at rest, derived from users’ credentials | news.ycombinator.com | 2023-09-12Hello, all!
Encryption and user authentication are crucial to cybersecurity.
Encryption can be implemented at various levels. I believe that handling encryption at the application level is the most secure since it decreases the attack surface. For example, the SQL server doesn’t get to see the plaintext.
Krptn is a piece of software I’m currently building which could be used as a user authentication service, which also handles encryption (at the application level) of the user’s associated data (e.g.: the users’ phone number).
(Krptn only has a Python API right now.)
It would run in the same server instance as your Python code, so no need to host anything new (decreased complexity) - just install the Python module and call the APIs.
For additional security, I designed the system to derive the encryption keys from the users’ credentials. This prevents an attacker who gains access to the database from being able to decrypt all the data since the encryption keys aren’t stored anywhere. Additionally, each user gets an asymmetric keypair. This enables users to share specific pieces of information with each other.
I know that, for many projects, this level of encryption is not required to secure their system and hence not everyone would benefit from using this. But I hope that for the people who do wish to have such security, this project will help.
It would be much appreciated if you would try this out. Please let me know what you think of this! Also please provide some feedback if you have any!
Here is an example Django integration: https://github.com/krptn/djangoExample
Here is an example Flask integration: https://github.com/krptn/flaskExample
GitHub repo: https://github.com/krptn/krypton
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Python Totp related posts
- Python implementation of the mobile Blizzard Authenticator (TOTP)
- django authentication , login with otp
- WebAuthn Is Great and It Sucks
- Terminal TOTP Manager
- Managing credentials for automated scripts
- Battle.net Authenticator Now Integrated into the Battle.net Mobile App
- PyPI announces mandatory use of 2FA for all software publishers
-
A note from our sponsor - WorkOS
workos.com | 25 Apr 2024
Index
What are some of the best open-source Totp projects in Python? This list will help you:
| Project | Stars | |
|---|---|---|
| 1 | pyotp | 2,826 |
| 2 | mintotp | 1,283 |
| 3 | extract_otp_secrets | 964 |
| 4 | python-bna | 241 |
| 5 | full-stack-fastapi-postgresql | 221 |
| 6 | android-otp-extractor | 211 |
| 7 | rofi-rbw | 163 |
| 8 | totp-cli | 123 |
| 9 | kagi | 90 |
| 10 | apache_2fa | 70 |
| 11 | krypton | 47 |
| 12 | alfred-ykman-oath | 10 |
| 13 | FreakOTP | 4 |
| 14 | djangoExample | 2 |
| 15 | TTM | 2 |
| 16 | TOTP_poc | 2 |
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com