totp-cli

totp-cli is a simple command line application to generate OTP tokens for two factor authentication using RFC6238.

These are compatible with many popular services such as Facebook, GitHub, Google, eve-online, battle.net, etc.

totp-cli fetches your shared key (aka: code) from pass, generates the token, outputs it to stdout and copies it to your CLIPBOARD X selection. Default X selection can be overridden with the PASSWORD_STORE_X_SELECTION environment variable.

Shared keys should be stored in your pass storage under 2fa/SERVICE/code, for example 2fa/github/code. The -a flag (or alternatively the add subcommand) can be used to add this less painfully.

Usage

Usage:

totp SERVICE

For example:

$ totp github
621787

You don't need to run totp from the command line if you just want to paste the code; you can run it from dmenu, or whatever your application launcher is.

To offset the clock by a number of seconds:

totp -s SECONDS SERVICE

For example:

$ totp -s +60 github
735092
$ totp -s -90 github
909651

To add a service:

totp -a SERVICE
# OR
totp add SERVICE

For example:

$ totp -a github
Token length [6]: 6
Shared key: KEY

Note that if the service already exists, it will be overwritten without warning.

To output without copying to the clipboard:

$ totp -n SERVICE # OR $ totp --nocopy SERVICE

About pass entries

Pass entries are expected to have the TOTP secret in their first line (as provided by the third party). The amount of digits token must have (for example, battle.net uses 8), must be provided in a separate line, with a format like:

Digits: 8

For the moment, only customizing the token length is possible.

Requirements

There are also some platform-specific requirements for copying code into the clipboard:

xclip for Xorg (Linux/BSD).

Installation

Installation is quite simple:

$ pip install totp

There is also an AUR package available for ArchLinux users.

You can also configure shell completion for totp-cli:

Bash: Download totp-cli-completion.bash and source it from your bash configuration file (e.g. .bash_profile)
Zsh: Download totp-cli-completion.zsh as _totp to site-functions directory (e.g. /usr/local/share/zsh/site-functions)