Name: OTPClient
Author: Paolo Stivanin

Application for managing TOTP/HOTP tokens with built-in encryption

OTPClient is a secure and easy-to-use desktop client for TOTP and HOTP one-time passwords, built with GTK4 and libadwaita. Features:

multiple databases with sidebar management and cross-database search
token grouping with quick filtering
desktop search provider for GNOME Shell and KDE KRunner (opt-in trigger keyword)
command-line companion (otpclient-cli) with scriptable table/JSON/CSV output
support for TOTP, HOTP, and Steam codes
configurable digits (4 to 10), period (1 to 120 seconds), and algorithm (SHA1, SHA256, SHA512)
import and export of encrypted/plain Aegis backups
import and export of encrypted/plain Authenticator Pro and 2FAS backups
import and export of plain FreeOTP+ backups (key URI format)
import of Google Authenticator migration QR codes (file, screen, webcam, clipboard)
integration with the OS secret service provider via libsecret (opt-in)
local database encrypted with AES-256-GCM and Argon2id key derivation; plaintext lives only in libgcrypt secure memory while unlocked

Bug-fix release. Following the anonymous-token fix in 5.1.3, a database containing a token with an out-of-range digit count still refused to open, again locking users out of every other token. The load-time validator was stricter than the OTP engine and the app's own UI; the accepted ranges now match the engine (digits 4 to 10, period 1 to 120 seconds). Any token the engine still cannot use is set aside so the rest of the database opens, and is preserved for repair rather than dropped.

FIX: a database containing a token with an out-of-range digit count (or period) refused to open, locking users out of all their tokens. Accepted ranges now match the OTP engine (digits 4 to 10, period 1 to 120), and any token that still cannot be loaded is kept aside and preserved instead of bricking the whole database (#464, follow-up to #458/#462)
FIX: right-click context menus on tokens and databases were clipped to the scrolled area and needed scrolling to reach lower items such as "Set Group"; they now size to their contents (#465)

Application for managing TOTP/HOTP tokens with built-in encryption

OTPClient is a secure and easy-to-use desktop client for TOTP and HOTP one-time passwords, built with GTK4 and libadwaita. Features:

multiple databases with sidebar management and cross-database search
token grouping with quick filtering
desktop search provider for GNOME Shell and KDE KRunner (opt-in trigger keyword)
command-line companion (otpclient-cli) with scriptable table/JSON/CSV output
support for TOTP, HOTP, and Steam codes
configurable digits (4 to 10), period (1 to 120 seconds), and algorithm (SHA1, SHA256, SHA512)
import and export of encrypted/plain Aegis backups
import and export of encrypted/plain Authenticator Pro and 2FAS backups
import and export of plain FreeOTP+ backups (key URI format)
import of Google Authenticator migration QR codes (file, screen, webcam, clipboard)
integration with the OS secret service provider via libsecret (opt-in)
local database encrypted with AES-256-GCM and Argon2id key derivation; plaintext lives only in libgcrypt secure memory while unlocked

FIX: a database containing a token with an out-of-range digit count (or period) refused to open, locking users out of all their tokens. Accepted ranges now match the OTP engine (digits 4 to 10, period 1 to 120), and any token that still cannot be loaded is kept aside and preserved instead of bricking the whole database (#464, follow-up to #458/#462)
FIX: right-click context menus on tokens and databases were clipped to the scrolled area and needed scrolling to reach lower items such as "Set Group"; they now size to their contents (#465)

OTPClient

Application for managing TOTP/HOTP tokens with built-in encryption

Änderungen in Version 5.1.4

Links

OTPClient

Application for managing TOTP/HOTP tokens with built-in encryption

Änderungen in Version 5.1.4

Links