cotp - command line totp authenticator

I believe that security is of paramount importance, especially in this digital world. I created cotp because I needed a minimalist, secure, desktop accessible software to manage my two-factor authentication codes.

Overview

cotp is written with simplicity in mind, it relies on only one database file, encrypted with XChaCha20Poly1305 authenticated encryption and Argon2id for key derivation.

The interface is quite minimalist and intuitive, by typing cotp -h you can see all the program features.

You can also import backup made by Aegis and andOTP Authenticators, but backup compatibility is growing (check planned features)

Installation

ArchLinux

You can install cotp through the Arch User Repository. Before beginning check you already have the required packages:

pacman -S git base-devel

Then choose how you want to proceed

• Using an AUR Helper like yay: yay -S cotp
• Or paru: paru -S cotp

• Manually cloning AUR repo and make the pkg

  git clone https://aur.archlinux.org/cotp.git cd cotp makepkg -si

  Other distributions

Before beginning check that you have the required compilers to build cotp by yourself: - gcc - rust toolchain, can be installed through rustup

Using crates.io repository

It's possible to install cotp directly through cargo, as it's listed in the crates.io repository.

Just type cargo install cotp and wait for the installation

Clone the Github repository and manually install

You can build cotp using these commands:

git clone https://github.com/replydev/cotp.git #or https://codeberg.org/replydev/cotp.git
cargo install --path cotp/

How to use

If you are familiar with the command line interface using cotp will not be a problem. Please note that cotp requires at least an 8 chars length password. As i said before, if you type cotp -h you get some instruction on how to use cotp utilities. For example, the version 0.1.1 prints out this help screen: ``` cotp v0.1.1 written by @replydev

USAGE: cotp [SUBCOMMAND]

ARGUMENTS: -a,--add [SECRET] [ISSUER] [LABEL] | Add a new OTP code -e,--edit [ID] [SECRET] [ISSUER] [LABEL] | Edit an OTP code -r,--remove [ID] | Remove an OTP code -i,--import [APPNAME] [PATH] | Import a backup from a given application -ex,--export | Export the entire database in a plaintext json format -j,--json | Print results in json format -s,--single | Print OTP codes in single mode -h,--help | Print this help `` Note that in the--edit` command if you type . instead of argument you are specifying not to modify that specific argument.

Example:

Before:

|index|secret|issuer|label| |--|--|--|--| |3|NB2HI4DTHIXS653XO4XHS33VOR2WEZJOMNXW2L3XMF2GG2B7OY6WIULXGR3TSV3HLBRVC | Rick | Asley |

Command:

cotp -e 3 . . cotp

After:

|index|secret|issuer|label| |--|--|--|--| |3|NB2HI4DTHIXS653XO4XHS33VOR2WEZJOMNXW2L3XMF2GG2B7OY6WIULXGR3TSV3HLBRVC | Rick | cotp |

Planned features

• [x] Reduce binary size and improve compilation speed by removing useless dependencies.
• [x] Use Argon2id for key derivation
• [x] CLI Dashboard
• [ ] Backup compatibility with:
  • [x] Aegis
  • [x] andOTP
  • [ ] Authy
  • [ ] Google Authenticator
  • [ ] FreeOTP
• [ ] Graphical User Interface

Contribution

I created this project for my own needs, but I would be happy if this little program is useful to someone else, and I gratefully accept any contributions.