16

Is there a desktop application for Google authenticator (an equivalent to the phone app, not the PAM lib)?

10

There are Java apps, both GUI and CLI. Both were listed on the Google Authenticator page at Wikipedia. Both include install instructions on their respective download pages.

I like the idea but I have not tested either of these nor would I assume they are secure or even work correctly. This is a summary of my search results, not a recommendation.

  • 1
    Cool, thank you. It's too bad these are not provided with the google-authenticator code. Also, I wonder if it would be easy to make some kind of desktop widget with multiple account/key pairs, maybe using another language ;-) – ℝaphink Aug 31 '12 at 10:00
  • @Raphink yes, maybe a dead simple appindicator that would drop down a small menu with the code(s)? Maybe it's best to require two different devices to log in from a security perspective though. I'm very reluctant to trade security for convenience. – Tom Brossman Aug 31 '12 at 11:31
  • An appindicator would be very nice indeed. Porting the code to another language (e.g. python) shouldn't be too hard. As for several devices… well there's still the password. I don't really see a problem with having the authenticator on the desktop as far as security goes. – ℝaphink Aug 31 '12 at 11:56
  • 1
    To be clearer, the main security feature of TOTP imo is to prevent login/password remote attacks, not so much local attacks using the 1 or 2 machines I use every day. – ℝaphink Aug 31 '12 at 11:57
8

You can use some Extension for your web browser, they work pretty good.

Here you go, here's an example:

enter image description here

For Chrome/Chromium/Yandex (and other Chrome based browsers) you can use Authenticator. Just click on "Add to Chrome" button from this link.

Or you can add it through: Customise and control menu (three dashes/dots upper right corner of the browser) > Settings > Extensions > Get more extensions (in the bottom of the list) > Search the store for: Authenticator.

You need to add a Passphrase. This step will allow you to sync multiple instances - transfer of the authentication data between computers which you use with your Google account.

To add an authentication key: First click here to open a demo barcode in your browser. Then follow next steps for: Scan QR code or Manual entry. If the barcode is not generated by some Google application, for most cases you must use only Manual entry. If the authentication code is time based you must use Sync Clock with Google function.

To use the application, just click on the Authenticator icon. Wait for the beginning of a new cycle. Click on the new generated key. It will be copied to the clipboard.

Use the key! Usually you have about a minute and a half to use it.

I'm not so familiar with other browsers, but for example, within Firefox in a similar way you can use Open Two-Factor Authenticator.


In addition, the next answers describe how to implement Two Factor Authentication (using Google Authenticator) within Apache2 and OpenSSH:

6

Simply install the small command line utility oathtool.

sudo apt-get install oathtool

Then run such a command to get a one time password:

oathtool --totp -b YOURSECRET

1

You could also try authenticator

To install, just type:

pip3 install authenticator

You could add accounts using

authenticator add MyAccount

At first it will ask you to create data files (say yes), then ask for a password to secure your otp secrets (required). After you confirm your password, it will ask for the secret code to generate the one time password. To generate an OTP:

authenticator gen MyAccount

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.