Name: OTPClient
Author: Paolo Stivanin

Application for managing TOTP/HOTP tokens with built-in encryption

OTPClient is a secure and easy-to-use desktop client for TOTP and HOTP one-time passwords, built with GTK4 and libadwaita. Features:

multiple databases with sidebar management and cross-database search
token grouping with quick filtering
desktop search provider for GNOME Shell and KDE KRunner (opt-in trigger keyword)
command-line companion (otpclient-cli) with scriptable table/JSON/CSV output
support for TOTP, HOTP, and Steam codes
configurable digits (4 to 10), period (1 to 120 seconds), and algorithm (SHA1, SHA256, SHA512)
import and export of encrypted/plain Aegis backups
import and export of encrypted/plain Authenticator Pro and 2FAS backups
import and export of plain FreeOTP+ backups (key URI format)
import of Google Authenticator migration QR codes (file, webcam, clipboard)
integration with the OS secret service provider via libsecret (opt-in)
local database encrypted with AES-256-GCM and Argon2id key derivation; plaintext lives only in libgcrypt secure memory while unlocked

Application for managing TOTP/HOTP tokens with built-in encryption

OTPClient is a secure and easy-to-use desktop client for TOTP and HOTP one-time passwords, built with GTK4 and libadwaita. Features:

multiple databases with sidebar management and cross-database search
token grouping with quick filtering
desktop search provider for GNOME Shell and KDE KRunner (opt-in trigger keyword)
command-line companion (otpclient-cli) with scriptable table/JSON/CSV output
support for TOTP, HOTP, and Steam codes
configurable digits (4 to 10), period (1 to 120 seconds), and algorithm (SHA1, SHA256, SHA512)
import and export of encrypted/plain Aegis backups
import and export of encrypted/plain Authenticator Pro and 2FAS backups
import and export of plain FreeOTP+ backups (key URI format)
import of Google Authenticator migration QR codes (file, webcam, clipboard)
integration with the OS secret service provider via libsecret (opt-in)
local database encrypted with AES-256-GCM and Argon2id key derivation; plaintext lives only in libgcrypt secure memory while unlocked

Packaging release. The Flatpak's search provider now sends its notifications through the notification portal instead of talking to the desktop's notification service directly, so the sandbox no longer needs that permission. Native installs are unchanged.

FIX: inside the Flatpak, the search provider's "code copied" and failure notifications go through the notification portal. A notification carrying a code is marked transient where the portal supports it (version 2 and later; older portals reject the hint, so it is only sent after the portal has reported its version) and is withdrawn after five seconds everywhere, so it no longer lingers in notification history on portals that drop the hint, such as KDE's

OTPClient

Application for managing TOTP/HOTP tokens with built-in encryption

Changes in version 5.2.2

Links

OTPClient

Application for managing TOTP/HOTP tokens with built-in encryption

Changes in version 5.2.2

Links