Hacker GitHub

← All repos

google/google-authenticator

View on GitHub ↗ ★ 5,357 Java archived

Open source version of Google Authenticator (except the Android app)

23 mentions on Hacker News by 21 people: 4 stories, 19 comments · first 2015-03-01 · latest 2025-04-24

Mentions per year 23 mentions · busiest year 2015 (5)
20082026
AllStoriesComments NewestTopOldest
  1. …where you copy a server-generated secret to your phone through a QR-code-encoded otpauth:// URI ( https://github.com/google/google-authenticator/wiki/Key-Uri-... ). That doesn't happen in a "forgot password" flow. Incidentally, if you…
    comment by ucarion · 2025-04-15 · in Behind the 6-digit code: Building HOTP and TOTP from scratch
  2. …encoded into the QR code. [0]: https://shkspr.mobi/blog/2022/05/why-is-there-no-formal-spec... [1]: https://github.com/google/google-authenticator/wiki/Key-Uri-...
    comment by ezekg · 2024-07-06 · in Ente Auth: open-source Authy alternative for 2FA
  3. otpauth:// is a de-facto standard, since Google Authenticator uses it: https://github.com/google/google-authenticator/wiki/Key-Uri-... The TOTP QR codes decode to one of these URIs
    comment by SaberTail · 2023-08-15 · in GitHub will disable non-2FA accounts?
  4. Seriously, the QR is just a URI that any QR reader can decode (preferably one you trust). https://github.com/google/google-authenticator/wiki/Key-Uri-...
    comment by cyanawesome · 2022-10-18 · in TOTP tokens on my wrist with the smartest dumb watch
  5. …com?secret=HXDMVJECJJWSRB3HWIZR4IFUGFTMXBOZ&issuer=ACME%20Co&algorithm=SHA1&digits=6&period=30 (From: https://github.com/google/google-authenticator/wiki/Key-Uri-... ). Notice all parameters I mentioned above are present, as well as a user…
    comment by stonewareslord · 2021-12-31 · in Ask HN: How do I protect myself against SIM swap attacks?
  6. https://github.com/google/google-authenticator/wiki/Key-Uri-... That's the format that gets encoded into the QR code. If you can decode the QR code you can get the secret key easily.
    comment by Jtsummers · 2021-08-27 · in How does Google Authenticator work?
  7. Whoa. TIL https://github.com/google/google-authenticator/wiki/Key-Uri-...
    comment by thephyber · 2020-06-20 · in Turn on MFA Before Crooks Do It for You
  8. …https://en.wikipedia.org/wiki/Time-based_One-time_Password_a... https://github.com/google/google-authenticator/wiki/Key-Uri-...
    comment by kaoD · 2018-10-11 · in Listen to a SIM-Jacking, Account-Stealing Ransom
  9. …configurable number of digits, so Google Authenticator could support that too if it wanted to. [1] https://github.com/google/google-authenticator/wiki/Key-Uri-...
    comment by conorgil145 · 2017-11-14 · in FreeOTP – An open-source solution for authentication soft tokens
  10. …from what's in the app stores, so patches here won't necessarily show up in those versions. Source: https://github.com/google/google-authenticator/blob/master/R...
    comment by hdhzy · 2017-06-29 · in How can Ethereum systematically scale better?
  11. …the result in an encrypted file. A variant of the Google Authenticator source code is available at https://github.com/google/google-authenticator but is not what's on the iOS/Android app stores.
    comment by epc · 2017-05-25 · in Ask HN: Which 2FA app do you use for your iPhone?
  12. …digit code seems a bit weak. It seems that 6 digits is fixed in Google Authenticator at the moment: https://github.com/google/google-authenticator/wiki/Key-Uri-... . HOTP might also be possible, but then you also have to store state (the…
    comment by dividuum · 2016-08-10 · in Show HN: A minimal web-based IMAP client for use on untrusted machines
  13. …no connection to my google account. If I Google kicked me off the two factor app would keep running https://github.com/google/google-authenticator
    comment by greggman · 2016-07-25 · in Why Did Google Erase Cooper's Beloved Literary Blog?
  14. Ah, indeed. There's a seperate function for HOTP: https://github.com/google/google-authenticator/blob/3fb90bda... And of course the switch statement that handles the core logic starts by checking scratch codes, and if that doesn't work,…
    comment by e12e · 2016-05-16 · in How to Set Up Two-Factor Authentication for Login and Sudo
  15. …enter is an invalid scratch code, the system will check to see if it was a valid time-based code): https://github.com/google/google-authenticator/blob/3fb90bda... This older article shows a bit of the hoops one could jump through to get a…
    comment by e12e · 2016-05-16 · in How to Set Up Two-Factor Authentication for Login and Sudo
  16. …0, +30, -30). But don't take my word for it, Google has Authenicator source code available here: https://github.com/google/google-authenticator/blob/master/l... Look at "window" or "window_size" options. To quote Google's own comment: > By…
    comment by Someone1234 · 2015-09-29 · in iOS 9 Time bug breaking two factor authentication
  17. Google also created a PAM module for OTP [1]. [1] https://github.com/google/google-authenticator
    comment by nadams · 2015-08-23 · in One-Time SSH Keys
  18. …to login right away. That to me would be a targeted attack rather than some random phish. [1] - https://github.com/google/google-authenticator/wiki
    comment by nadams · 2015-06-30 · in Google hacked account
  19. An open source one at that! https://github.com/google/google-authenticator/
    comment by __david__ · 2015-03-27 · in Slack was hacked