-
-
Notifications
You must be signed in to change notification settings - Fork 1.7k
Steam Guard Support for TOTP #594
Description
Expected Behavior
Option to use steam's generation when setting up totp
Current Behavior
No option
Possible Solution
This has already been done as a plugin for the original keepass, so I would expect that since it is only an algorithm difference it shouldnt actually be too difficult.
link to mentioned project: https://github.com/victor-rds/KeeTrayTOTP
"The Mobile Steam Guard uses a standard time-based one-time password (RFC 6238) to generate the hash from the user’s secret key. However, Steam’s implementation differs from the standard in generating the actual displayed code. Rather than creating a 6 or 8 digit base10 code, Steam keeps compatibility with their existing email codes to create a 5 character string. This string is created from a specific set of 26 letters or digits."
https://winauth.com/2015/06/11/steam-guard-mobile/
Context
Currently stuck using my phone for totp on steam, which is certainly less than ideal, especially when I am often unable to access steam on it due to rom problems, so being able to access straight from my keepass vault would be awesome.
Your Environment
KeePassXC - Version 2.1.4
Revision: c3bd5d2
- Qt 5.8.0
- libgcrypt 1.7.6
Operating system: Arch Linux
CPU architecture: x86_64
Kernel: linux 4.11.2-1-ck-haswell