Skip to content
/ sotp Public

Get TOTP from the command line using TOTP secrets in Sops encrypted files.

Notifications You must be signed in to change notification settings

getsops/sotp

Repository files navigation

SOTP: Sops OTP

Small utility to store AWS TOTP secrets into Sops encrypted files and generate OTP on the command line.

Usage:

$ sotp test1
current one-time password is: 693190

Sotp reads it's configuration from config.yaml in the local directory. The config must be a valid Sops encrypted YAML file with the syntax:

accounts:
    - name: test1
      totpsecret: YAGQP5IP77OO3HMPS3D2KPMSNLNDIB7EO22EGAN3JEGE3DAR37Z2U5YDGKGN44VA
    - name: test2
      totpsecret: xyzabcd....
  • name is just a reference name that you'll use when invoking Sotp
  • totpsecret is a the secret seed you get from the Adding a virtual MFA screen in the AWS IAM console of a given user

aws_mfa_screen

About

Get TOTP from the command line using TOTP secrets in Sops encrypted files.

Resources

Code of conduct

Stars

Watchers

Forks

Packages

No packages published

Languages