Learn how to build a production-ready Email OTP authentication node in ForgeRock AM 7.x using the RFC 4226 HOTP algorithm. Includes complete Java source, Maven project, SMTP delivery with TLS, rate limiting, and JUnit 5 tests validating all RFC test vectors.

https://iamdevbox.com/posts/building-an-email-otp-node-hotp-example-and-email-sending-configuration-in-forgerock-am/?utm_source=mastodon&utm_medium=social&utm_campaign=blog_post

#ForgeRock #ForgeRockAM #EmailOTP #HOTP #TwoFactorAuthenticat

#xsukax Secure #Authenticator

https://github.com/xsukax/xsukax-Secure-Authenticator

Demo: https://xsukax.github.io/xsukax-Secure-Authenticator/

A privacy-focused, #client-side #two-factor authentication (2FA) application that generates Time-based One-Time Passwords (TOTP) and #HMAC-based One-Time Passwords (HOTP) entirely within your browser. No server communication, no tracking, complete control over your authentication codes.

#totp #hotp

Behind the 6-digit code: Building HOTP and TOTP from scratch

https://blog.dogac.dev/how-do-one-time-passwords-work/

#HackerNews #HOTP #TOTP #OneTimePasswords #Security #Development

Are you happy with current #TOTP #HOTP mobile apps out there? #authy #google #microsoft #freeotp.

#ios #android #app

If you see a new or want to try a new unknown #TOTP #authenticator #passwordManager what factors you look for.

1. Open Source app.
2. At least core open source.
3. I try evaluate mostly features matter.
4. I love #BigTech, don't care #SmallTech.

Need some inputs selecting a different #authenticator #password #PasswordManager, any help I really appreciate.

Thanks.

I'm looking for a good overview/comparison of different #MFA/#2FA or #PasswordLess authentication protocols.

The recent #Fido2 #MitM risk made me aware that I need to learn more.

Pointers and #BoostWelcome

#fedipower #wisdomOfTheCrowd #FollowerPower

As the best way to get an answer on the internet, is to state something wrong, let's try this 😜

#FIDO and FIDO2 are actually a whole set of (related?) protocols.
FIDO includes FIDO #UAF (Universal Authentication Framework) and FIDO #U2F (Universal Second Factor).

FIDO2 is the "successor" of FIDO and consists of two parts.
#WebAuthn and #CTAP (Client to Authenticator Protocol). From the name I would guess that WebAuthn is for web stuff (requiring browser support) and CTAP is for IT infrastructure stuff (???)

#Passkey is based on #Fido2
Other related concepts or protocols are #OTP (one-time passwords), #TOTP (Time-based One-time Password) and #HOTP (“H” in HOTP stands for Hash-based Message Authentication Code (HMAC))

Not sure how #SmartCards play into this.

And not sure which of these methods would work for an offline authentication login into your laptop (and ideally also as key for whole disk encryption)

Authenticator app? What's that? I use the terminal 🔥

🔒 **cotp**: Trustworthy and encrypted TOTP/HOTP authenticator with a TUI.

🚀 Supports importing (e.g. from Aegis, Authy, Google Authenticator, etc.)

🦀 Written in Rust & built with @ratatui_rs

⭐ GitHub: https://github.com/replydev/cotp

#rustlang #ratatui #tui #totp #hotp #authentication #auth #encryption