Skip to content

Steam Guard Support for TOTP #594

@ibrokemypie

Description

@ibrokemypie

Expected Behavior

Option to use steam's generation when setting up totp

Current Behavior

No option

Possible Solution

This has already been done as a plugin for the original keepass, so I would expect that since it is only an algorithm difference it shouldnt actually be too difficult.
link to mentioned project: https://github.com/victor-rds/KeeTrayTOTP

"The Mobile Steam Guard uses a standard time-based one-time password (RFC 6238) to generate the hash from the user’s secret key. However, Steam’s implementation differs from the standard in generating the actual displayed code. Rather than creating a 6 or 8 digit base10 code, Steam keeps compatibility with their existing email codes to create a 5 character string. This string is created from a specific set of 26 letters or digits."
https://winauth.com/2015/06/11/steam-guard-mobile/

Context

Currently stuck using my phone for totp on steam, which is certainly less than ideal, especially when I am often unable to access steam on it due to rom problems, so being able to access straight from my keepass vault would be awesome.

Your Environment

KeePassXC - Version 2.1.4
Revision: c3bd5d2

  • Qt 5.8.0
  • libgcrypt 1.7.6
    Operating system: Arch Linux
    CPU architecture: x86_64
    Kernel: linux 4.11.2-1-ck-haswell

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions