A Two-Factor Auth Client
Tired of having to pull out your phone all the time to grab those 2fa codes?
Install: npm install -g tfa
Getting Help
bash-3.2$ tfa
Usage: tfa [options] [command]
Commands:
enroll-qrcode|enq [options] <qrcode> enroll using a qrcode file
enroll|en [options] enroll
generate|gen [options] [label] generate
list|l list
delete|d <label> delete
Options:
-h, --help output usage information
-V, --version output the version number
Enroll
Most two factor auth services provide a QRCode for enrollment with applications
such as Google Authenticator on Android. When you're setting up 2fa, save the
QRCode locally. Then do:
tfa enq qrcode.png
Where qrcode.png is the absolute or relative path to your saved QRCode file.
tfa will extract both the secret and a label from the QRCode. The label is
used to generate 2fa codes. Many times, however, the label included in the
QRCode is not very user friendly. You can set your own local label using the
-l option:
tfa enq -l foo qrcode.png
If the qrcode enrollment isn't working for whatever reason, and you happen to
know the TOTP secret being used, you can enroll manually:
tfa enroll -s {thesecret} -l {label}
Listing and Generating
To see a listing of enrolled services, do:
tfa list
This will print the list of labels out to the console.
To generate the current TOTP token for a label:
tfa gen {label} (e.g. tfa gen foo)
To generate the current TOTP tokens for all labels:
tfa gen
Cleaning up
To delete a secret:
tfa delete {label} (e.g. tfa delete foo)
Important note about dependencies
The QRCode scanning function depends on the canvas and jsqrcode modules from
npm. To use tfa with QRCodes, there are a few unfortunate prerequisite
installation steps you will need as documented here:
https://github.com/Automattic/node-canvas/wiki/_pages
It's not fun, but once you're through it, it should just work.