Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Image

I am using Google Authenticator for 2-step authentication. I like how I can use a code and verify my account using my phone:

google-authenticator-android3.gif

I realize that the app was designed to run on a device other than a computer to increase security for the computer (in case that it is lost or stolen), but I would like to know if there is a way I can run Google Authenticator on my Macbook.

Now, per the Google Authenticator Page it will not run on a desktop:

What devices does Google Authenticator work on?

  • Android version 2.1 or later
  • BlackBerry OS 4.5 - 6.0
  • iPhone iOS 3.1.3 or later

However there are several emulators for developers and so I wonder if it is possible to run one of these emulators and then run Google Authenticator with that. I do realize this is not a best practice - but I'm less worried about my laptop getting stolen and more worried about someone just hacking the account.

So my question is this: Is it possible to run it on the desktop, even though it is not meant to be / not recommended?

share|improve this question

12 Answers 12

up vote 8 down vote accepted

You could use Oracle's VirtualBox, Android x86 OS, and then install the Authenticator. This would essentially give you the Google Authenticator on a desktop.

VirtualBox: https://www.virtualbox.org/

Android x86: http://www.android-x86.org/

share|improve this answer

Install oath-toolkit via brew, generate your keys with:

oathtool --totp -b <your_secret>

To get your secret, use the 'change phone' option in Google. You can get your key by clicking the 'manually enter the key' link.

share|improve this answer
    
works like a charm! – khadafi Nov 21 '15 at 20:50
    
wow ... this is gonna save me a lot of time and a trip to get my phone for everything :) – GeekRide Feb 16 at 9:57

There is a Self Hostable Web App at https://github.com/gbraad/html5-google-authenticator This is not secure on an internet facing machine, but you can load this on a completely offline Machine and you'd be safe.

share|improve this answer
1  
It looks really good - just makes me nervous b/c I don't easily understand everything that makes it work :) – cwd May 25 '13 at 0:30
3  
basically, it's using local storage inside your browser to store a secret key, local storage is only accessible from the domain it was written from (someone correct me if i'm wrong), it then uses the current time and the secret key from the local storage, to compute what the key should be. It's all just Javascript goodness – Jharwood May 28 '13 at 13:11
1  
This one is awesome bro. Now I don't need to run a VirtualBox or Bluestacks for this. – manish_s Mar 24 '14 at 16:41

JAuth is a good alternative - Java based (has Windows, Linux, and OS X installers), small and portable. I keep a copy on a USB drive.

share|improve this answer
    
For my money, this ought to be the accepted answer. JAuth is works great, and has its own installer. It really couldn't be any easier. – evadeflow Apr 11 '14 at 13:37

There's also a Firefox app version. It doesn't need Firefox to run first, and you can actually install Firefox portable so it doesn't impact your system .

https://marketplace.firefox.com/app/gauth-authenticator/

share|improve this answer
    
has moved to: marketplace.firefox.com/app/gauth?src=search – Joe Feb 1 '15 at 20:12

Yes. You can use WinAuth. Works fine for me.

share|improve this answer

Try Authy: https://www.authy.com/.

It works for many 2fa accounts, including Google. Authy supports multiple platforms, including PC.

Note: Google seems to only provide a QR code for adding accounts. This means it's easiest to add your Google account via the Authy Android app. However, once you do that, you can also access it from the PC Authy app.

share|improve this answer
    
By far the best solution. It has a Chrome Extension too :) – Jacob Relkin Dec 3 '15 at 10:26
    
Requires an online account. – pgampe Mar 30 at 20:19

I hacked together an oath-toolkit integration with a CLI that works in Quicksilver too. The CLI Bash Script and .otpkeys Configuration File example can be found in the Quicksilver and OTP: Together At Last blog post.

You'll need your secret keys so you can put them into the config.

Bash Script:

#!/bin/bash
scriptname=`basename $0`
if [ -z $1 ]
then
    echo "$scriptname: Service Name Req'd"
    echo ""
    echo "Usage:"
    echo "   otp google"
    echo ""
    echo "Configuration: $HOME/.otpkeys"
    echo "Format: name=key"
    exit
fi
otpkey=` grep ^$1 $HOME/.otpkeys | cut -d"=" -f 2 | sed "s/ //g" `
if [ -z $otpkey ]
then
    echo "$scriptname: Bad Service Name"
    exit
fi
/usr/local/bin/oathtool --totp -b $otpkey

Configuration File example for .otpkeys -- spaces are stripped.

google=a743 mike k3b4 rm5k z8a9 q6f5 id1k bxk1
facebook=OWBV Q9LF POQ2 MKYU
evernote=UKPPIDEALLKPYTT9
dropbox=iop4 xbox asia b0ss ninj a9

Usage -- specify the full or partial service name from the config, anchored to the beginning of the service name. E.g. 'goo' will work for google, but 'oogl' will not.

iso : ~ --> otp google
196379
iso : ~ --> otp goo
612384
share|improve this answer

I am amazed that nobody posted my favourite one. Forget all suggested if you have to deal with more than 1 key, pass or any other kind of information. It is always a question how do you use it. The easiest method is to use an password managment tool (please do not use online services for such things :), lastpass has been hacked too). Here is my suggestion (works on linux, mac, android), this one is for windows users:

  1. Download latest KeePass (currently 2.32) and set your DB up (please secure it with more than just an pass, an certificate makes it all more secure as example)
  2. Download TrayTOTP Plugin for KeePass and copy it into plugins folder located in KeePass installation folder.
  3. For an entry in KeePass, create two custom strings for your keepass entry:

First string: TOTP Seed

Second string: TOTP Settings

Under TOTP Seed you should place your seed key. For settings, many are confused, especially newbies. By default (and most use defaults) new key is always created every 30 seconds and has length of 6. That means, if not explicit set, then TOTP Settings should have:

30;6

30: Stands for seconds

6: Stands for length of a key

I know only couple services where you can choose or set it manually, Kraken Exchange is one of them, when you secure your accout, you can choose length up to 8 signs and totp settings would be 30;8

  1. Change Autotype :) , there are two types of pages and how they verify.

First: You can enter username, password and 2FA key.

Second: You need to enter username and password, after pressing enther/submitting, seond page/frame shows asking for 2FA.

For first case, edit your keepass entry by changing autotype options. Click on "Override default sequence" which is:

{USERNAME}{TAB}{PASSWORD}{ENTER}

and add pressing additional TAB, then placing TOTP key and then pressing ENTER:

{USERNAME}{TAB}{PASSWORD}{TAB}{TOTP}{ENTER}

For second case, we need to send user and pass, then wait 1-3 seconds (I will set here 5 seconds) and then 2FA key:

{USERNAME}{TAB}{PASSWORD}{ENTER}{DELAY 5000}{TOTP}

That's it. Press CTRL+V or right click and perform autotype, that's it. Who found this information usefull, I am hungry dev, share your happyness and satisfaction if you can:

MyBTC Wallet Addres: 3DkJDkDRepkGeGSiczq9Zk76tvczS28arm

, especially admins of different companies who are looking for an good solution for this or hesitate applying 2FA in their networks, well, that's the way how it can be used and it's much easier (userfriendly), faster and much more secure then all other currently widely used solutions. Any who saw this in action is and was amazed, hope you will be too.

Good night

share|improve this answer

YubiKey offers a hardware solution (an USB dongle) that's capable of doing OATH-TOTP.

There's also a Windows helper program:

http://www.yubico.com/applications/internet-services/gmail/

share|improve this answer

Here is a Chrome extension version https://chrome.google.com/webstore/detail/authenticator/bhghoamapcdpbohphigoooaddinpkbai

share|improve this answer
3  
Wow, I would never use a non-Google tool for this. (But it might be legit and safe to use.) – Arjan Jul 26 '14 at 19:29
2  
While this link may answer the question, it is better to include the essential parts of the answer here and provide the link for reference. Link-only answers can become invalid if the linked page changes. – Ƭᴇcʜιᴇ007 Jul 26 '14 at 21:20
    
Thanks, that's the simplest way to do it. – BMW Jan 1 '15 at 4:42

On MAC (OSX) you can use Alfred* and the GAuth-Workflow to get the Google Authenticator on your Desktop.

  • Workflows are only supported with the (paid) Powerpack version.
share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .