Fully offline 2FA TOTP generator?

Questions
1

Hey I’m looking for a cross-platform 2FA TOTP generator that runs offline and let’s me hook up syncthing or rclone to sync the database between my machines. Currently I use Aegis but I worry something may happen to my phone and I’ll be unable to retrieve my codes (since it’s exclusively Android).

2

You can use Aegis with Syncthing. Aegis can automatically backup your codes to a JSON file. You can create a dedicated folder for Aegis to backup to and add it Syncthing. you can also do manual exports to the folder

For me, I have this same setup. Aegis to automatically export, Syncthing to sync the export to my server, and Restic with my bash script for scheduled backups

You can also use Ente Auth in offline mode and import your export on your PC

3

Keepass (XC, DX) can also be used for that. At least I’m using it, alongside with Aegis

4

2FA authenticators work offline and don’t need internet connection.

I worry something may happen to my phone and I’ll be unable to retrieve my codes (since it’s exclusively Android).

I suggest to switch to Ente Auth, it has a web version where you can retrieve your TOTPs in case you loose your device and has also an export feature.

5

What about this? It seems to support Aegis import.

But since you are worried about loosing your accounts tokens, you should consider Yubikey (it also supports storing TOTP on it).

6

The code exports are cross platform. All you really need are the secrets.

7

I’m using Ente auth. I have it auto backup on device and I just copy them to ProtonDrive from time to time. I don’t add codes often.

8

@NovaViper asked exactly about fully offline (read no server).

So I think the best approach is go and use export/import in authenticator apps…

9

Thanks for the suggestions, peeps! I think I’m going to go with Ente Auth, since that works across Linux and Android as well as let me be able to use it without having to create an account

Edit: Actually I’m going to keep both OTPClient and Ente Auth for now, just to see which one I prefer.

10

That’s exactly what Ente auth is

11

Ente Auth’s appimage doesn’t work on Linux distros that don’t use systemd. Artix, Antix, MX, Devuan, Gentoo, Void, etc etc. Ente has a dependency on systemd service.