Name: OTPClient
Author: Paolo Stivanin

Application for managing TOTP/HOTP tokens with built-in encryption

OTPClient is a secure and easy-to-use desktop client for TOTP and HOTP one-time passwords, built with GTK4 and libadwaita. Features:

multiple databases with sidebar management and cross-database search
token grouping with quick filtering, group-wide rename and removal, and multi-select actions
review and repair of tokens that failed validation, and a preview before every import
desktop search provider for GNOME Shell and KDE KRunner (opt-in trigger keyword)
command-line companion (otpclient-cli) with scriptable table/JSON/CSV output
support for TOTP, HOTP, and Steam codes
configurable digits (4 to 10), period (1 to 120 seconds), and algorithm (SHA1, SHA256, SHA512)
import and export of encrypted/plain Aegis backups
import and export of encrypted/plain Authenticator Pro and 2FAS backups
import and export of plain FreeOTP+ backups (key URI format)
import of Google Authenticator migration QR codes (file, webcam, clipboard)
integration with the OS secret service provider via libsecret (opt-in)
local database encrypted with AES-256-GCM and Argon2id key derivation; plaintext lives only in libgcrypt secure memory while unlocked

Bug fix release. OTPClient no longer aborts at startup when GLib finds a settings schema left over from an older release, and staged package installs no longer generate system caches. There is no on-disk format change; existing databases open unchanged.

FIX: an outdated compiled settings schema found ahead of the current one, for example under ~/.local/share or /usr/local/share, made the application abort at startup. It now starts with default settings and logs a warning that names the missing keys and the directory holding the outdated schema
FIX: installing into a staging directory with DESTDIR no longer writes a compiled schema and an icon cache that cover only OTPClient's files and clash with the ones owned by GLib and the icon theme. A direct install still refreshes both, and the new POST_INSTALL_CACHES build option turns the step off
TEST: the application and the settings helper are started against a schema that lacks the newest key and must not abort

Application for managing TOTP/HOTP tokens with built-in encryption

OTPClient is a secure and easy-to-use desktop client for TOTP and HOTP one-time passwords, built with GTK4 and libadwaita. Features:

multiple databases with sidebar management and cross-database search
token grouping with quick filtering, group-wide rename and removal, and multi-select actions
review and repair of tokens that failed validation, and a preview before every import
desktop search provider for GNOME Shell and KDE KRunner (opt-in trigger keyword)
command-line companion (otpclient-cli) with scriptable table/JSON/CSV output
support for TOTP, HOTP, and Steam codes
configurable digits (4 to 10), period (1 to 120 seconds), and algorithm (SHA1, SHA256, SHA512)
import and export of encrypted/plain Aegis backups
import and export of encrypted/plain Authenticator Pro and 2FAS backups
import and export of plain FreeOTP+ backups (key URI format)
import of Google Authenticator migration QR codes (file, webcam, clipboard)
integration with the OS secret service provider via libsecret (opt-in)
local database encrypted with AES-256-GCM and Argon2id key derivation; plaintext lives only in libgcrypt secure memory while unlocked

OTPClient

Application for managing TOTP/HOTP tokens with built-in encryption

Changes in version 5.3.2

Links

OTPClient

Application for managing TOTP/HOTP tokens with built-in encryption

Changes in version 5.3.2

Links