Implement TOTP authentication
Planned
Migrated from Uservoice #48522770
Created by: Will Watts
Date: 2024-06-10T17:41:36Z
Votes: 1
Supporters: 1
Comment by: Richard Huveneers
Date: 2024-06-11T14:14:17Z
Thanks for your feedback Will, this will definitely be added, I was already wondering why nobody has requested this. This is high on the todo list.
-
Glad to hear that this feature will be supported.
1 -
Great - look forward to seeing it!
Natch your (phone) implementation will be able to drive the camera to read a QR code with embedded secret key, as well as copy/paste the ghastly Base 32 string, as in the Windows version.
(I know you are going to do it properly. Just keeping you on your toes 😉)0 -
Version 10.3.0 for iOS has been approved by Apple. It features the update of the Password Safe engine used by pwSafe, so this was the first step to enable TOTP support.
The macOS version will follow soon (the update has been submitted to Apple, not yet approved).
Two more steps to go
- Read-only support, so the app will be able to show TOTP codes if an entry has an existing TOTP key.
- Add TOTP keys to an entry (either by QR code or entering the base32 string)
0 -
🥳!
0 -
Version 10.3.2 for iOS has been submitted to Apple for approval. It contains read-only support for TOTP, i.e. if an entry has a 2FA key (e.g. added on Windows platform) then it will display accordingly.
More info here: https://support.huvisoft.dev/hc/en-us/articles/29500871445780-Does-pwSafe-support-TOTP-Time-based-one-time-password
including a test safe in case you need one.
Feedback welcome!
0 -
Well, on my tested account, the number agrees with PWsafe/Win and Google Authenticator… and worked! A good start.
One teeny nit-pick: is there a reason why your 30s expiry widget rotates counter-clockwise? It had me slightly baffled when I first saw it. Google and PWSafe for Windows both rotate clockwise, which feels slightly more natural.
I look forward to QR-coding.0 -
Brilliant, thanks for the feedback.
About clockwise/counter-clockwise, can you share a short animation from the Windows version please? I know, I can easily do that myself, but don't have access to a WIndows device the next days…
Richard.
0 -
>> can you share a short animation from the Windows version please?
Try this.
You set me an intelligence test there, which I nearly flunked. PwSafe for Windows has an excellent mechanism to hide itself from any attempt at screen capture. I was about to give up, when it occurred to me to film it on my phone. Please notify when grabbed so I can void the link.0 -
Thanks for shariing that Will. I've downloaded the file, so you can delete the link.
Apple uses the same circle animation clock-wise when e.g. downloading. As that fills the circle, it seemed natural to go counter-clockwise on countdown, but apparently not :-)
I'll change the animation in the next update.
0 -
Just a heads up for who's using the Mac version of pwSafe: 10.3.3 will catch-up with iOS to include the read-only support for TOTP.
0 -
Hi and thanks for the work on this. This has become pretty important recently (for me because Authy is no longer allowing installs of any version on MacOS) so any beta testing or other feedback you need, we’ll be here for you.
0 -
Hi Joel, thanks for sharing your thoughts. You can easily join our TestFlight users group using this link https://testflight.apple.com/join/FwNXBCE9 (this one is for the macOS version) or https://testflight.apple.com/join/wmFC9hH3 (iOS).
It looks like nothing changed since my last post, a lot has happened though, let me give a brief status update.
To start, the upgrade to the new Password Safe core (necessary for TOTP support) introduced some issues that took a few updates to resolve.
We are currently busy extending the user-interface. Adding just the necessary changes for managing TOTP is not that hard, but we need more. After TOTP other elements need to be added too (think of attaching images to an entry). Specifically for macOS, the interface needs to support font size changes.
All-in-all we are redesigning the interface to accommodate this, so that is why it is taking some extra time.
I expect a first beta version to be available within 2 weeks.
0 -
The first beta is now available (for iOS, so you need to join here if you want to try it out).
Note: please read https://support.huvisoft.dev/hc/en-us/community/posts/31560042046228 about the new layout and how to enable it. Please post non-TOTP-related comments on the new layout on that page, if it is TOTP related posting it here is ok too.
I hope to release the first beta for macOS next week that uses the same layout.
0 -
The first beta for macOS has been submitted to Apple, needs to go through their approval process, takes a day normally. If you want to give it a try then please join the macOS test group here: https://testflight.apple.com/join/FwNXBCE9
Let me know what you think!
Note: please read https://support.huvisoft.dev/hc/en-us/community/posts/31560042046228 about the new layout and how to enable it. Please post non-TOTP-related comments on the new layout on that page, if it is TOTP related posting it here is ok too.
0 -
For iOS, 10.5 is now GA https://itunes.apple.com/us/app/pwsafe-2-password-safe-compatible/id938922963?ls=1&mt=8
After enabling the New Entry Layout setting, you should be able to add new TOTP codes.
Let me know what you think, any feedback is welcome!
0 -
10.5 for macOS has been submitted for approval, so should arrive within a few days. This version includes support to add TOTP codes to pwSafe!
Note: after installing the 10.5 version, you need to enable the new layout as explained here:
https://support.huvisoft.dev/hc/en-us/community/posts/31560042046228-New-Entry-Layout
Feedback welcome!
0
Please sign in to leave a comment.
Comments
17 comments