A command-line TOTP/HOTP authenticator with strong encryption, import capabilities, and an interactive dashboard.
cotp is a secure, encrypted command-line application for managing two-factor authentication (2FA) codes. It generates TOTP and HOTP codes, storing them in an encrypted database to protect authentication data. The tool offers an interactive dashboard for browsing and copying codes, even in SSH remote shells.
Developers, system administrators, and security-conscious users who prefer command-line tools and need a secure, minimalist way to manage 2FA codes across Linux, Windows, and macOS systems.
Developers choose cotp for its strong encryption using XChaCha20Poly1305 and Argon2id, broad compatibility with various OTP types and authenticator apps, and its cross-platform, desktop-accessible design that works seamlessly in remote shells.
Encrypted, command-line TOTP/HOTP authenticator app with import functionality.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Uses XChaCha20Poly1305 authenticated encryption and Argon2id for key derivation, ensuring high security for stored OTP data as explicitly stated in the README's encryption section.
Provides an arrow-key navigable interface that works even in remote SSH shells, allowing code browsing and copying without GUI dependencies, demonstrated in the demo GIF.
Supports TOTP, HOTP, Steam, Yandex, and MOTP codes with customizable HMAC algorithms and digits, covering various authentication systems as highlighted in the compatibility section.
Offers import from apps like Aegis, Authy, and Google Authenticator, with detailed conversion scripts provided for complex cases, as shown in the migration table with specific arguments.
Importing from apps like Authy or Google Authenticator requires running additional Python scripts to convert backup files, adding manual steps and potential points of failure, as admitted in the migration table.
On Linux, installation needs libxcb and related dependencies for clipboard functionality, which can complicate setup on minimal systems, as noted in the install instructions for various distros.
The database is locally encrypted without automatic cloud synchronization or multi-device access, making it impractical for users who need seamless access across platforms or fear data loss.
Forgetting the encryption password leads to permanent data loss, as there's no built-in recovery mechanism, relying solely on user backups via the export command.
cotp is an open-source alternative to the following products:
A mobile app that generates two-factor authentication (2FA) codes for signing into Google accounts and other services that support time-based one-time passwords.
Microsoft Authenticator is a mobile app that provides two-factor authentication for Microsoft accounts and other services using time-based one-time passwords or push notifications.
Authy is a two-factor authentication (2FA) application that provides secure login verification via time-based one-time passwords (TOTP) and push notifications. It is owned by Twilio.