cotp
A command-line TOTP/HOTP authenticator with strong encryption, import capabilities, and an interactive dashboard.
What is cotp?
cotp is a secure, encrypted command-line application for managing two-factor authentication (2FA) codes. It generates TOTP and HOTP codes, storing them in an encrypted database to protect authentication data. The tool offers an interactive dashboard for browsing and copying codes, even in SSH remote shells.
Developers, system administrators, and security-conscious users who prefer command-line tools and need a secure, minimalist way to manage 2FA codes across Linux, Windows, and macOS systems.
Developers choose cotp for its strong encryption using XChaCha20Poly1305 and Argon2id, broad compatibility with various OTP types and authenticator apps, and its cross-platform, desktop-accessible design that works seamlessly in remote shells.
Overview
Encrypted, command-line TOTP/HOTP authenticator app with import functionality.
Use Cases
Best For
- Securely managing TOTP and HOTP codes from the command line with encrypted storage.
- Migrating 2FA codes from popular authenticator apps like Aegis, andOTP, Authy, Google Authenticator, and Microsoft Authenticator.
- Generating Steam, Yandex, and MOTP codes with customizable HMAC algorithms and digits.
- Using an interactive dashboard to browse and copy OTP codes in SSH remote shells.
- Cross-platform 2FA management on Linux, Windows, and macOS with minimal dependencies.
- Importing and exporting encrypted OTP databases for backup and migration purposes.
Not Ideal For
- Teams needing shared, real-time access to 2FA codes across multiple devices, as cotp uses a local encrypted database without cloud synchronization.
- Mobile-only users who require on-the-go 2FA generation via smartphone apps, since cotp is command-line based and not designed for mobile platforms.
- Users who prefer graphical interfaces and find CLI tools cumbersome for daily authentication tasks, given cotp's minimalist terminal-only approach.
- Environments where quick, scriptable 2FA integration is critical, as cotp's interactive dashboard and encryption overhead add complexity compared to plain-text secret storage.
Pros & Cons
Pros
Uses XChaCha20Poly1305 authenticated encryption and Argon2id for key derivation, ensuring high security for stored OTP data as explicitly stated in the README's encryption section.
Provides an arrow-key navigable interface that works even in remote SSH shells, allowing code browsing and copying without GUI dependencies, demonstrated in the demo GIF.
Supports TOTP, HOTP, Steam, Yandex, and MOTP codes with customizable HMAC algorithms and digits, covering various authentication systems as highlighted in the compatibility section.
Offers import from apps like Aegis, Authy, and Google Authenticator, with detailed conversion scripts provided for complex cases, as shown in the migration table with specific arguments.
Cons
Importing from apps like Authy or Google Authenticator requires running additional Python scripts to convert backup files, adding manual steps and potential points of failure, as admitted in the migration table.
On Linux, installation needs libxcb and related dependencies for clipboard functionality, which can complicate setup on minimal systems, as noted in the install instructions for various distros.
The database is locally encrypted without automatic cloud synchronization or multi-device access, making it impractical for users who need seamless access across platforms or fear data loss.
Forgetting the encryption password leads to permanent data loss, as there's no built-in recovery mechanism, relying solely on user backups via the export command.
Open Source Alternative To
cotp is an open-source alternative to the following products:
A mobile app that generates two-factor authentication (2FA) codes for signing into Google accounts and other services that support time-based one-time passwords.
Microsoft Authenticator is a mobile app that provides two-factor authentication for Microsoft accounts and other services using time-based one-time passwords or push notifications.
Authy is a two-factor authentication (2FA) application that provides secure login verification via time-based one-time passwords (TOTP) and push notifications. It is owned by Twilio.
Frequently Asked Questions
Related Projects
rustscan🤖 The Modern Port Scanner 🤖
feroxbusterA fast, simple, recursive content discovery tool written in Rust.
rayhunterRust tool to detect cell site simulators on an orbic mobile hotspot
rustnetPer-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.