# andotp/andotp

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/andotp-andotp).**

_How this analysis was created: the description and tags below were written by an AI model that read this project's README and public documentation pages; stars, license and language come straight from the GitHub API. The model does not read the source code._

3,719 stars · 375 forks · Java · MIT · archived

## Links

- GitHub: https://github.com/andOTP/andOTP
- awesome-repositories: https://awesome-repositories.com/repository/andotp-andotp.md

## Topics

`android` `backup` `hotp` `material-design` `openpgp` `otp` `totp` `two-factor-authentication`

## Description

andOTP is an open-source multi-factor authentication client for Android. It functions as a time-based and HMAC-based one-time password authenticator for managing two-factor authentication tokens.

The application serves as an encrypted vault for authentication secrets, utilizing hardware keystores, passwords, or PINs to secure the account database. It is specifically designed to support automated backups by exporting account databases via system broadcasts for integration with external automation tools.

The software covers the management of authentication tokens through QR code scanning and the migration of tokens from other compatible applications. It provides capabilities for encrypting account storage and exporting authentication data into plain-text or password-protected formats.

## Tags

### Security & Cryptography

- [Open-Source Authenticator Clients](https://awesome-repositories.com/f/security-cryptography/open-source-authenticator-clients.md) — Functions as an open-source client application for managing multi-factor authentication credentials.
- [TOTP Generation Utilities](https://awesome-repositories.com/f/security-cryptography/totp-generation-utilities.md) — Generates time-based one-time passwords for secure account access following industry standards. ([source](https://github.com/andotp/andotp#readme))
- [Encrypted Vaults](https://awesome-repositories.com/f/security-cryptography/credential-vaults/encrypted-vaults.md) — Provides a secure, encrypted vault using symmetric encryption and hardware keystores to protect authentication secrets.
- [Encrypted Storage](https://awesome-repositories.com/f/security-cryptography/encrypted-storage.md) — Secures the authentication database on disk using a password, PIN, or hardware keystore. ([source](https://github.com/andotp/andotp#readme))
- [HMAC Generation](https://awesome-repositories.com/f/security-cryptography/hmac-generation.md) — Implements keyed-hash message authentication codes to generate counter-based one-time passwords.
- [Hardware-Backed Key Storage](https://awesome-repositories.com/f/security-cryptography/key-management/hardware-backed-key-storage.md) — Uses device-level hardware security modules to store the encryption keys for the authentication database.
- [TOTP Vaults](https://awesome-repositories.com/f/security-cryptography/password-management/totp-vaults.md) — Provides a specialized vault for organizing and securing multiple TOTP authentication tokens.
- [Symmetric Encryption](https://awesome-repositories.com/f/security-cryptography/symmetric-encryption.md) — Encrypts the local account database using a single shared secret key derived from a password or hardware.
- [TOTP Authenticator Apps](https://awesome-repositories.com/f/security-cryptography/totp-authenticator-apps.md) — Generates time-based and HMAC-based one-time passwords for securing accounts via two-factor authentication.
- [Two-Factor Authentication](https://awesome-repositories.com/f/security-cryptography/two-factor-authentication.md) — Generates time-based and HMAC-based one-time passwords to provide a second layer of security. ([source](https://github.com/andotp/andotp#readme))
- [Automated Backup Authenticators](https://awesome-repositories.com/f/security-cryptography/automated-backup-authenticators.md) — Functions as an authentication manager that exports account databases via system broadcasts for integration with backup tools.
- [QR Code Secret Imports](https://awesome-repositories.com/f/security-cryptography/qr-code-secret-imports.md) — Allows users to scan QR codes to automatically import authentication secrets into the vault. ([source](https://github.com/andotp/andotp#readme))

### Data & Databases

- [Account Data Backups](https://awesome-repositories.com/f/data-databases/account-data-backups.md) — Exports encrypted account information to files using hardware cryptography or passwords for secure archiving. ([source](https://github.com/andotp/andotp#readme))
- [Broadcast-Triggered Backups](https://awesome-repositories.com/f/data-databases/automated-backup-systems/scheduled-database-backups/broadcast-triggered-backups.md) — Triggers encrypted or plain-text database exports via system broadcasts to integrate with external automation tools. ([source](https://github.com/andotp/andotp#readme))
- [Password-Protected Archives](https://awesome-repositories.com/f/data-databases/data-import-and-export/collection-exports/password-protected-archives.md) — Exports the account database into password-protected or encrypted archives for secure backup. ([source](https://github.com/andotp/andotp#readme))

### Graphics & Multimedia

- [Token Parsers](https://awesome-repositories.com/f/graphics-multimedia/qr-code-generators/branded-qr-codes/token-parsers.md) — Translates visual QR code data into structured authentication account configurations for automatic entry.