I am amazed that nobody posted my favourite one. Forget all suggested if you have to deal with more than 1 key, pass or any other kind of information. It is always a question how do you use it. The easiest method is to use an password managment tool (please do not use online services for such things :), lastpass has been hacked too). Here is my suggestion (works on linux, mac, android), this one is for windows users:
- Download latest KeePass (currently 2.32) and set your DB up (please secure it with more than just an pass, an certificate makes it all more secure as example)
- Download TrayTOTP Plugin for KeePass and copy it into plugins folder located in KeePass installation folder.
- For an entry in KeePass, create two custom strings for your keepass entry:
First string: TOTP Seed
Second string: TOTP Settings
Under TOTP Seed you should place your seed key. For settings, many are confused, especially newbies. By default (and most use defaults) new key is always created every 30 seconds and has length of 6. That means, if not explicit set, then TOTP Settings should have:
30: Stands for seconds
6: Stands for length of a key
I know only couple services where you can choose or set it manually, Kraken Exchange is one of them, when you secure your accout, you can choose length up to 8 signs and totp settings would be 30;8
- Change Autotype :) , there are two types of pages and how they verify.
You can enter username, password and 2FA key.
You need to enter username and password, after pressing enther/submitting, seond page/frame shows asking for 2FA.
For first case, edit your keepass entry by changing autotype options. Click on "Override default sequence" which is:
and add pressing additional TAB, then placing TOTP key and then pressing ENTER:
For second case, we need to send user and pass, then wait 1-3 seconds (I will set here 5 seconds) and then 2FA key:
That's it. Press CTRL+V or right click and perform autotype, that's it. Who found this information usefull, I am hungry dev, share your happyness and satisfaction if you can:
MyBTC Wallet Addres: 3DkJDkDRepkGeGSiczq9Zk76tvczS28arm
, especially admins of different companies who are looking for an good solution for this or hesitate applying 2FA in their networks, well, that's the way how it can be used and it's much easier (userfriendly), faster and much more secure then all other currently widely used solutions. Any who saw this in action is and was amazed, hope you will be too.