#Keepassxc totp secrets software#
#Keepassxc totp secrets code#

#Keepassxc totp secrets software#

Then some outside software could read that CSV and write all the TOTP info to a hardware token such as a Yubikey. I would export entry name and TOTP secret columns. Database export to CSV and HTML formats TOTP storage and generation. If it doesn't exist already, make an easy button to export just some columns (configurable) to a CSV. KeePassXC KeePassXC is a modern, secure, and open-source password manager that. Store the TOTP secrets in a normal column, visible in the main database pane, exportable into CSV, and which can be stripped as part of the 'strip database' operation. And the master database is closed and stored in a different place.Īdd a 'strip database' button/operation that is configurable, and erases all data from a list of columns from the database, erases all Notes and Attachments from the database, but preserves the Groups and global database settings etc.

#Keepassxc totp secrets code#

If the site does not give you the secret key in clear text together with the QR code, isnt a QR code the equivalent of that string of characters. Now I have separation between the two factors of each login: username, password, URL come from the everyday KeePass database, and TOTP comes from the hardware token. How would I add a TOTP 2FA Key into my KeePassXC database when the website in question I am setting up 2FA gives me a QR code.

It exports all of the entry names and TOTP secrets to a hardware token such as a Yubikey. Store the TOTP secrets in a normal column, visible in the main database pane, exportable into CSV, and which can be stripped as part of the 'strip database' operation. It doesn't have any of the 2FA information in it.Īlso from the master database, I can do a simple one-button 'export TOTP secrets to hardware token' operation. KeePassXC is a cross-platform community-driven port of the Windows application Keepass Password Safe. on Linux, and I dont know all the features or all the versions of KeePass. Now this new 'everyday' database is open and online most of the time I use it to log in to sites. kdbx file, then do a simple one-button 'strip database' operation to remove everything except entry names, usernames, passwords, URLs. The master database will be closed 99% of the time and stored offline. Have a master KeePass database that contains everything: groups, entry names, usernames, passwords, URLs, TOTP secrets, recovery codes, 2FA SMS phone numbers, notes, attachments, etc.

on Linux, and I don't know all the features or all the versions of KeePass, and KeePassXC doesn't have extensions, so please correct me if I get something wrong or a feature already exists.