It is automatically renewed every 30 seconds (more precisely, on hh:mm:00 and on hh:mm:30). The default values (6 digits, 30 seconds) are fine for many/all? providers.Īfter entering the key, KeePass immediately starts generating OTP codes. Remember to remove spaces from value entered into KeePass. If available, use copy-and-paste to avoid error. To import a TOTP secret key, right click the entry and select Edit Entry (Quick) –> OTP Generator Settings.Įnter the TOTP secret key generated by the authentication provider (e.g. Using KeePass as an authenticator requires the following steps.Ĭreate a new entry or edit an existing one. You should use at least two different KeePass files with different master-passwords. So, from a security perspective it not a good choice to store password and TOTP keys into the same storage. TOTP keys should not be stored alongside account passwords which relate to. Storing all security related data in the same place is dangerous. Note: because KeePass is mainly a password manager, it also stores regular passwords. It manages both the secure storage of TOTP secret keys and the generation of OTP one-time-password codes. So, some steps are more integrated and automatic as described here.Īs previously anticipated, KeePass can be used as an authenticator. Note: Microsoft and Google authenticator apps have automatic features when dealing with their native accounts. User, when required, can use the generated codes during the authentication process.App continuously generate OTP codes, based on TOTP secret key.The user scans the datamatrix using the authenticator app and the app imports secret key alongside other side-data.Authentication provider generates a TOTP secret key and display it as a datamatrix.

The datamatrix holds much information but the really relevant one is the secret key.Įxample of data stored into the whole process can be summarized as: Secret key and other information are normally imported by scanning a datamatrix, generated by the authentication provider. TOTP works by sharing a secret key between the authentication provider and the OTP generator (the authenticator app). Many (all?) account providers use it, like Microsoft and Google, in the 2-steps/multi-factor-authentication services. Starting from the version 2.51, it is even more easier storing TOTP keys and generating one-time-passwords.Īuthenticator are based on TOTP protocol. It was born as a secure password storage but can also securely store other information. But sometimes could be useful to have a second OTP generator, alongside the classic authenticator app on mobile. They are easy to be setup: scanning a data-matrix is enough to import required data and to be ready to generate one-time-passwords, OTP. People normally prefer using classic authenticator applications, running on mobile phone, like Microsoft Authenticator and Google Authenticator. General use of KeePass as TOTP key storage and OTP generator.TOTP, OTP and authenticator introduction.Using KeePass as TOTP keys storage and OTP generator with Microsoft and Google accounts - Intro

Generate otp code