GitHub will disable non-2FA accounts?

Re:GitHub will disable non-2FA accounts? by Lanedo on Tuesday August 15, 2023 @12:35PM (#37136037)

Speaking of solutions, when you want to avoid using a phone, there is oathtool. For example for a GitHub 2FA Link like this:

  otpauth://totp/GitHub:username?secret=BLAHBLUBBLAH&issuer=GitHub

You extract the secret and use it like this:

  oathtool --totp=sha1 --base32 BLAHBLUBBLAH
  268685

[ Parent | on HN ]

Re:GitHub will disable non-2FA accounts? by mistrial9 on Tuesday August 15, 2023 @03:18PM (#37138098)

what is that otpauth:// part about?

    $oathtool --totp - -b
    <enter 16digit code>
    6digit result for MSFT-Github

that works daily CLI; oathtool is packaged as part of OpenStack on GNU-Debian-Ubuntu

[ Parent | on HN ]

Re:GitHub will disable non-2FA accounts? by SaberTail on Tuesday August 15, 2023 @05:19PM (#37139406)

otpauth:// is a de-facto standard, since Google Authenticator uses it: https://github.com/google/google-authenticator/wiki/Key-Uri-...

The TOTP QR codes decode to one of these URIs

[ Parent | on HN ]

Re:GitHub will disable non-2FA accounts? by gettodachoppa on Wednesday August 16, 2023 @05:31AM (#37144653)

Not on my dev PC now (and dont want to access GH on this one).

How do you get that 'otpauth://totp/GitHub:username?secret=BLAHBLUBBLAH&issuer=GitHub' path? Is it something you have to grab from the browser console?

[ Parent | on HN ]