Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OTP - add support for google authenticator exported QRcode ? #127

Open
Drew72-ita opened this issue Apr 1, 2024 · 3 comments
Open

OTP - add support for google authenticator exported QRcode ? #127

Drew72-ita opened this issue Apr 1, 2024 · 3 comments

Comments

@Drew72-ita
Copy link

This report/suggestion concerns the acquisition and decoding of the QR code containing the seed/secret for OTP.

I see that the standard format (encoded in the QR code) is recognised:
otpauth://totp/Example:[email protected]?secret=JBSWY3DPEHPK3PXP&issuer=Example
(this is an example, there is no sensitive data)
which you can also enter by hand as a text string (I tried it and it works)

However, it does not recognise the fairly widespread format used to export OTPs by applications such as google authenticator, which encodes a string in the QR code in the format
otpauth-migration://offline?data=CiMKCskCjMDVZlPV3OQSD015IFRlc3QgQWNjb3VudCABKAEwAhAB
(this is an example, there is no sensitive data)

The use case is an user exporting the OTP from "hot" and relatively unsafe google authenticator to a safer cold HW wallet as jade.

@JamieDriver
Copy link
Collaborator

This is a great suggestion!
I'll see if I can find documentation relating to this format, and if so (ie. I can parse what's in the 'data' element) will look to add support.
Many Thanks.

@Drew72-ita
Copy link
Author

Hi,

I'm glad to be useful ^_^.

I used this

https://github.com/dim13/otpauth

but for command line conversion.

@JamieDriver
Copy link
Collaborator

JamieDriver commented Apr 2, 2024

Right, it appears to use protocol-buffers, which may not be something we can support immediately. More digging will be required.
(See also https://alexbakker.me/post/parsing-google-auth-export-qr-code.html)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants