Skip to main content

This is a new website theme. Help me improve it and give your feedback (opens in a new tab).

Password Manager + TOTP

Published:

Tags:

2fa Passwords Opsec Journal
This blog post is more than two years old. It is preserved here in the hope that it is useful to someone, but please be aware that links may be broken and that opinions expressed here may not reflect my current views. If this is a technical article, it may no longer reflect current best practice.

I’d like to have a backup method for TOTP. For this, I’m looking at using the pass-otp extension which is available both in OpenBSD packages and Debian.

There appears to be some way of scanning QR codes with your webcam in order to extract the URIs, but I can skip this because I have a Honeywell Voyager 1450g handheld 2D barcode scanner (it is very fancy).

Basic operation looks like:

  1. Adding TOTP seed to an existing password:
pass otp append path/to/password
  1. Getting a TOTP code:
pass otp path/to/password
  1. Displaying a QR code to add a backup device (tested with Authy on iOS):
pass otp uri -q path/to/password