Show HN: Open2FA – a CLI 2FA tool with optional secure remote capabilities (opens in new tab)

This is a tool I started working on whenever pypi decided to make 2FA mandatory. I've already been using it to login to pypi for a while, but only finished the remote capabilities recently.

It can be installed by simply running: `pip install open2fa`

Any secrets that are stored remotely are encrypted, so the person running the api (me) provably cannot use any remotely stored secrets.

It's possible to use pushed TOTP secrets from any device with the open2fa CLI installed, as long as the original UUID is known.

It's also possible to use any pushed secrets to generate 2FA codes from any device with a web browser, if one is willing to accept the inherent risks involved when doing so and th original UUID is known (as it is used to generate the Open2FA ID/Secret). I attempted to make this as secure as possible by avoiding the use of any 3rd party dependencies in the javascript, all the functionality related to generating 2FA codes from encrypted secrets in the webUI uses vanilla javascript. That being said, there are some risks that cannot ever be fully alleviated, if one needs to take their security seriously, they should avoid generating 2FA codes using the web tool. More information as to how this works can be found at:

https://open2fa.liberfy.ai | webui/api/explanation of remote capabilities

https://github.com/cc-d/open2fa/ | the CLI repo

https://github.com/cc-d/open2fa-server | the webui/api repo