andOTP/andOTPArchived
AndOTP
andOTP is an open-source multi-factor authentication client for Android. It functions as a time-based and HMAC-based one-time password authenticator for managing two-factor authentication tokens.
The application serves as an encrypted vault for authentication secrets, utilizing hardware keystores, passwords, or PINs to secure the account database. It is specifically designed to support automated backups by exporting account databases via system broadcasts for integration with external automation tools.
The software covers the management of authentication tokens through QR code scanning and the migration of tokens from other compatible applications. It provides capabilities for encrypting account storage and exporting authentication data into plain-text or password-protected formats.
Features
- Open-Source Authenticator Clients - Functions as an open-source client application for managing multi-factor authentication credentials.
- TOTP Generation Utilities - Generates time-based one-time passwords for secure account access following industry standards.
- Encrypted Vaults - Provides a secure, encrypted vault using symmetric encryption and hardware keystores to protect authentication secrets.
- Encrypted Storage - Secures the authentication database on disk using a password, PIN, or hardware keystore.
- HMAC Generation - Implements keyed-hash message authentication codes to generate counter-based one-time passwords.
- Hardware-Backed Key Storage - Uses device-level hardware security modules to store the encryption keys for the authentication database.
- TOTP Vaults - Provides a specialized vault for organizing and securing multiple TOTP authentication tokens.
- Symmetric Encryption - Encrypts the local account database using a single shared secret key derived from a password or hardware.
- TOTP Authenticator Apps - Generates time-based and HMAC-based one-time passwords for securing accounts via two-factor authentication.
- Two-Factor Authentication - Generates time-based and HMAC-based one-time passwords to provide a second layer of security.
- Account Data Backups - Exports encrypted account information to files using hardware cryptography or passwords for secure archiving.
- Broadcast-Triggered Backups - Triggers encrypted or plain-text database exports via system broadcasts to integrate with external automation tools.
- Password-Protected Archives - Exports the account database into password-protected or encrypted archives for secure backup.
- Token Parsers - Translates visual QR code data into structured authentication account configurations for automatic entry.
- Automated Backup Authenticators - Functions as an authentication manager that exports account databases via system broadcasts for integration with backup tools.
- QR Code Secret Imports - Allows users to scan QR codes to automatically import authentication secrets into the vault.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
