Authenticator for Linux

[CaffeineAddict]

Solid and feature rich authenticators for PC's are rare commodity, so rare that majority of people use authenticators on their phone because thats considered standard (albeit very insecure compared to authenticator on PC), and most likely everyone uses either google authenticator or MS authenticator since those 2 are most popular.

Recently I discovered OTPClient, which is a Linux authenticator based on GTK+

GitHub - paolostivanin/OTPClient: Highly secure and easy to use OTP client written in C/GTK3 that supports both TOTP and HOTP

Highly secure and easy to use OTP client written in C/GTK3 that supports both TOTP and HOTP - paolostivanin/OTPClient

github.com

I've set up 2FA with it on all websites that support 2FA and made a backup of local database in case my system crashes and needs to reinstall, so far it works great and I'm happy with it, certainly worth installing and using.

If you're on Debian or Debian based distro it's as simple as:

sudo apt install otpclient

---

Do you use 2FA? on your phone or PC? which software?

 

[f33dm3bits]

most likely everyone uses either google authenticator or MS authenticator since those 2 are most popular.

AFAIK they use OTP(time-based) as well or one of the protocols most of those 2FA apps use.

Do you use 2FA? on your phone or PC? which software?

I use FreeOTP on my phone because I don't always have a laptop I'm carrying around and I'm not always at home.

 

[CaffeineAddict]

I use FreeOTP on my phone

good one, I'll use it on my phone if needed.

I'm only sad that steam and paysafe don't support independent authenticators, they provide their own and you have to use theirs or don't use 2FA which is really sad.

 

[craigevil]

I use Aegis on my Android phone and Kindle.
I use https://addons.mozilla.org/en-US/firefox/addon/auth-helper/

 

[Condobloke]

fwiw .....OTPClient is available in Linux Mint's Software Manager as a Flatpak.

The first screen ...

 

[APTI]

Solid and feature rich authenticators for PC's are rare commodity, so rare that majority of people use authenticators on their phone because thats considered standard (albeit very insecure compared to authenticator on PC), and most likely everyone uses either google authenticator or MS authenticator since those 2 are most popular.

Recently I discovered OTPClient, which is a Linux authenticator based on GTK+

GitHub - paolostivanin/OTPClient: Highly secure and easy to use OTP client written in C/GTK3 that supports both TOTP and HOTP

Highly secure and easy to use OTP client written in C/GTK3 that supports both TOTP and HOTP - paolostivanin/OTPClient

github.com

I've set up 2FA with it on all websites that support 2FA and made a backup of local database in case my system crashes and needs to reinstall, so far it works great and I'm happy with it, certainly worth installing and using.

If you're on Debian or Debian based distro it's as simple as:

sudo apt install otpclient

---

Do you use 2FA? on your phone or PC? which software?

I avoid 2FA at all costs. It is insecure and many articles exist pointing that out. In fact I feel it makes things less secure. It all hinges on your phone which hinges on either apple or google account. And we know they are never hacked. So if a person gets your google or apple account then all the 2FA will go to them. Not to mention how much of a pain it is to have to put in a code from a phone. Or what if I do not have service where I am at? then I am stuck? No, I avoid 2FA at all costs and even tell them I do not have a cell phone so they won't ask.

 

[gvisoc]

Do you use 2FA? on your phone or PC? which software?

I use KeePassXC on my PCs, and on my iPhone KeePassium Pro. They have really nice OTP support.

I put the vault in my self-hosted NextCloud and I make it available to the iPhone via WebDAV.

 

[CaffeineAddict]

fwiw .....OTPClient is available in Linux Mint's Software Manager as a Flatpak.

The first screen ...

You find it troubling that password can't be recovered?
But how should password recovery work on offline program?

I keep the password in password manager and have to remember only master password.

I avoid 2FA at all costs. It is insecure and many articles exist pointing that out. In fact I feel it makes things less secure. It all hinges on your phone which hinges on either apple or google account. And we know they are never hacked. So if a person gets your google or apple account then all the 2FA will go to them.

True, that's why don't want 2FA on phone ruled by google or which ever other company, but instead on PC because then you're in full control, your offline database can't be hacked unless your PC is hacked as well and your authenticator password stolen.

And that's way more secure than having authenticator on phone, it's the reason why I made this thread, to promote authenticator on PC instead of phone.