Archives/extract_otp_secret_keys
2
0
Fork 0
mirror of https://github.com/scito/extract_otp_secret_keys synced 2024-10-31 15:20:27 +00:00
Code Issues Projects Releases Wiki Activity
14 Commits 12 Branches 48 Tags 35 MiB
Python 73.8%
Shell 23.5%
Dockerfile 2.5%
Nix 0.2%
1377f032b9
Go to file
scito 1377f032b9 fix: improve logging, handle file saving without issuer, extend example
2021-02-13 16:58:30 +01:00
generated_python fix example in readme, generate with protoc 3.14 2021-02-07 19:53:20 +01:00
.editorconfig Initial 2020-05-23 08:51:41 +02:00
.gitignore minor improvements 2020-12-21 19:52:55 +01:00
example_export.txt fix: improve logging, handle file saving without issuer, extend example 2021-02-13 16:58:30 +01:00
extract_otp_secret_keys.py fix: improve logging, handle file saving without issuer, extend example 2021-02-13 16:58:30 +01:00
google_auth.proto Initial 2020-05-23 08:51:41 +02:00
README.md add "known to work" in readme 2021-02-07 20:01:56 +01:00

README.md

Extract TOTP/HOTP secret keys from Google Authenticator

Extract two-factor authentication (2FA, TFA) secret keys from export QR codes of "Google Authenticator" app

Usage

  1. Export the QR codes from "Google Authenticator" app

  2. Read QR codes with QR code reader

  3. Save the captured QR codes in a text file. Save each QR code on a new line. (The captured QR codes look like otpauth-migration://offline?data=...)

  4. Call this script with the file as input:

     python extract_otp_secret_keys.py -p example_export.txt

Requirement

The protobuf package of Google for proto3 is required for running this script. protobuf >= 3.14 is recommended.

pip install protobuf

Known to work with

  • Python 3.6.12 and protobuf 3.14.0
  • Python 3.8.5 and protobuf 3.14.0

Optional

For printing QR codes, the qrcode module is required

pip install qrcode[pil]

Technical background

The export QR code of "Google Authenticator" contains the URL otpauth-migration://offline?data=.... The data parameter is a base64 encoded proto3 message (Google Protocol Buffers).

Command for regeneration of Python code from proto3 message definition file (only necessary in case of changes of the proto3 message definition):

protoc --python_out=generated_python google_auth.proto

References