6 ms·
RFC6238 TOTP (popularized by Google Authenticator) should fit your needs well. * It is an open algorithm based on http://tools.ietf.org/html/rfc6238 http://too
by ProblemFactory 11y ago
RFC6238 TOTP (popularized by Google Authenticator) should fit your needs well.
* It is an open algorithm based on http://tools.ietf.org/html/rfc6238 http://tools.ietf.org/html/rfc6238
* Both the server and client work completely offline based on a pre-shared key and current time. It does not need any third-party services, network calls, or paid plans.
* The Google Authenticator app for saving secrets and generating tokens is open-source and available on Android and iOS. It does not share the secrets or tokens with Google. Others have also published compatible apps.
* There is already a Debian/Ubuntu package for adding it to logins, including SSH logins: libpam-google-authenticator
* If that's not sufficient, then there are libraries for various languages.
* And if not, or if you want to build your own branded client, then both the server and client implementations take about 10 lines of code: http://en.wikipedia.org/wiki/Google_Authenticator#Technical_description http://en.wikipedia.org/wiki/Google_Authenticator#Technical_...