TOTP-CLIP

Generate TOTP authentication code for 2FA from a configuration stored in a YAML file with secrets in the system keyring and copy it to the clipboard.

Configuration (YAML)

Defaults to ~/totp.yml.

service_name:
  remote_name: identifier used to look up the secret in the keyring
  window_title: title of the window showing the OTP
  store_clipboard: Boolean option to either store the OTP in the clipboard

Secret storage (keyring)

Secrets are stored in the OS-native keyring (e.g. Secret Service on Linux, Keychain on macOS, Credential Locker on Windows) via the keyring library, under the service name totp-clip.

Adding a new account

totp-clip-setup service_name

This interactively prompts for the remote name, window title, clipboard preference and the TOTP secret key provided during the setup of the two-factor authentication, then writes the entry to the YAML configuration and stores the secret in the keyring. It can also be used to overwrite an existing entry.

Alternatively, the configuration and the secret can be managed manually: add an entry to the YAML configuration as described above, then store the secret with the keyring command line tool (install it with pipx install keyring):

keyring set totp-clip remote_name

where remote_name matches the corresponding entry in the YAML configuration.

Installation

pipx install totp-clip

Usage

totp-clip service_name

A shortcut may be manually created to launch the command mentioned.