1
0
Fork 0
mirror of https://github.com/Luzifer/webtotp.git synced 2024-11-14 02:02:44 +00:00
Small web-based utility to create ad-hoc TOTP codes
Find a file
dependabot[bot] 201b0095e1
Bump elliptic from 6.5.3 to 6.5.4
Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.3 to 6.5.4.
- [Release notes](https://github.com/indutny/elliptic/releases)
- [Commits](https://github.com/indutny/elliptic/compare/v6.5.3...v6.5.4)

Signed-off-by: dependabot[bot] <support@github.com>
2021-03-09 04:59:49 +00:00
dist Initial version 2019-06-02 01:20:29 +02:00
src Initial version 2019-06-02 01:20:29 +02:00
.dockerignore Initial version 2019-06-02 01:20:29 +02:00
.gitignore Initial version 2019-06-02 01:20:29 +02:00
Dockerfile Initial version 2019-06-02 01:20:29 +02:00
LICENSE Add meta files 2019-06-02 01:30:11 +02:00
package-lock.json Bump elliptic from 6.5.3 to 6.5.4 2021-03-09 04:59:49 +00:00
package.json npm update / audit fix 2020-08-02 15:35:08 +02:00
README.md Add hint for URL sending 2019-06-02 01:36:07 +02:00
screenshot.png Add meta files 2019-06-02 01:30:11 +02:00
webpack.config.js Initial version 2019-06-02 01:20:29 +02:00

Luzifer / webtotp

webtotp is a small web-based utility to create ad-hoc TOTP codes like the Google Authenticator would. The tool does not send any data to any service but is based fully in your browser.

My specific usecase for this is I do have accounts which OTP secrets are stored outside of my TOTP generator as usually I don't need to access those accounts and if I would add those secrets to my TOTP generator I would have a lot more entries in it. So I do store the secrets in a safe place and needed a convenient generator to generate single OTP tokens from them.

You can even send the page with the OTP code to someone by appending the secret to the URL in the hash part:

https://webtotp.example.com/#mysecret

As long as you make sure it is in the hash-part (behind the #) the browser will not send the secret to the server but keep it locally in the browser. When sending the URL containing the secret make sure you are using a secured transport like OTS to ensure the chat / email provider is not able to fetch those secrets from the URL.

Installation

Either use the provided Docker image:

# docker run --rm -ti -p 3000:3000 luzifer/webtotp

Or compile the code yourself and just put the generated files somewhere:

# npm ci && npm run build
# tree dist
dist
├── app.js
└── index.html

0 directories, 2 files