OTPClient Replacement on Trisquel 9
- Anmelden oder Registrieren um Kommentare zu schreiben
For my 2FA use I was using OTPClient and I love it. Sadly however they have no maintainer for Ubuntu 18.04 which means it wasn't receiving updates for it in the Synaptic Package manager and now isn't even there on Trisquel. The version I had installed on my Trisquel 9 system is too old to work properly. It generates a code but it isn't accepted. On Manjaro and Debian it works fine and they both have newer versions. Is there a 2FA program any of you can recommend that does work for Trisquel 9 ? This OTP issue will be fixed once Trisquel 10 is out and I am no longer relying on Ubuntu 18.04 packages but until then I need a stop gap.
You can learn to make Arch and/or Debian as free/libre as Trisquel. Purifying Debian is easier, since if you rejected firmware loading during installation, it's almost done.
You can also try Hyperbola/Parabola. However, if the installation media were old enough, you'd probably have some trouble in signature verification. You can try to update archilinux-keyring individually before performing a full update.
Yeah I think switching one of my systems to Debian temprorarily will be my resolution. I never choose to install non free repos and firmware during install so all I really have to do after that is not install them after.
I am a translator!
KeepassXC can store TOTP secrets and generate the one time password.
If you right click on an entry, you can see a TOTP submenu where you can enter the TOTP secret and generate the one time password. There are also keyboard shortcuts to make it faster.
The FAQ says one should at least have a separate database for TOTP secrets with a different password and if possible, have it on a separate computer. I guess KeepassDX on a device running Replicant might be another solution. I tried using KeepassXC on Mobian on the Phinephone, I never managed because of the usual problems (screen size and unresponsive touch).
This interests me as I already use KeePassXC. I will look into it and see how easy it is to setup.
In case anybody stumbles across this later on and wants another option, I just started testing out Pure OS 10. It is still in development but it has OTPClient in it's official repos. Pure OS 9 doesn't have it.
Security applications many times relays on libraries with very active development that by its nature, related to newer security technologies, is not possible to backport those dependencies to earlier versions making it unfeasible to keep the package on the repository.
I've seen that optclient has been removed upstream (Ubuntu) 'til 20.10, so Trisquel 10 based on 20.04 will not ship it by default. We might try to backport it from external sources, nonetheless the viability is not a warrantied.
I'll take a look on it to see if this can be added.
Cheers!
I get my otp from the command line with the "pass" program. Here's a good how-to video by Luke Smith that will walk you through setting it up: https://yewtu.be/watch?v=sVkURNfxPd4
You can use oathtool, a command-line tool that supports TOTP and HOTP. There are probably wrappers around it that are easier to use.
I use Aegis Authenticator on Android (available in F-Droid), as I prefer to keep my OTP keys on a separate device from my passwords.
I used to run Aegis as well but I am trying to transition my phones from Android based to my Pinephone which is why I picked OTPClient (it is available on Mobian and many desktop Linux clients).
- Anmelden oder Registrieren um Kommentare zu schreiben