2fa

2fa (TOTP Authenticator)

2fa is a command-line 2FA/TOTP authenticator tool, fully compatible with Google Authenticator.

Features

• Google Import: Supports importing accounts from Google Authenticator's export QR codes (otpauth-migration://).
• Real-time: Live countdown display in terminal with color indicators.
• Search: Fast fuzzy search for your accounts.
• Management: Add manual keys, delete accounts easily.

Installation

Option 1: Pre-built Binaries (Recommended)

Download the latest binary for your system from the Releases page.

• Windows: Download 2fa-windows-amd64.zip
• macOS: Download 2fa-darwin-amd64.tar.gz (Intel) or 2fa-darwin-arm64.tar.gz (Apple Silicon)
• Linux: Download 2fa-linux-amd64.tar.gz or 2fa-linux-arm64.tar.gz

Option 2: Go Install

go install github.com/ybcjcc/2fa@latest

Usage

1. List Codes

Run without arguments to show all codes. The interface refreshes every 30s (conceptually).

2fa
# Account                        | Code       | Expires
# ----------------------------------------------------------------------
# Google:[email protected]         | 123456     | 15 s
# GitHub:bob                     | 654321     | 15 s

2. Search

Filter by name or issuer.

2fa git

3. Import from Google Authenticator

1. In the Google Authenticator App: Transfer accounts -> Export accounts.
2. Use a QR scanner (e.g. WeChat, System Camera) to get the string starting with otpauth-migration://....
3. If you have multiple QR codes, paste each link into a text file (one per line).
4. Run import:

2fa import my_export.txt

Import Mechanism

graph TD
    A[Google Authenticator App] -->|Export Accounts| B(QR Code Image)
    B -->|Scan with Reader| C(otpauth-migration Link)
    C -->|Save to| D[Text File dump.txt]
    D -->|Run Import| E[2fa CLI Tool]
    E -->|Base64 Decode| F[Protobuf Binary]
    F -->|Unmarshal| G[Extract Secrets]
    G -->|Persist| H[~/.2fa/accounts.json]

Processing Flow

sequenceDiagram
    participant U as User
    participant T as 2fa CLI
    participant F as Import File
    participant P as Protobuf Parser
    participant S as Local Storage

    U->>T: 2fa import my_export.txt
    T->>F: Read File Content
    F-->>T: Return otpauth-migration:// link
    T->>T: Parse URL query 'data'
    T->>T: Base64 Decode
    T->>P: Unmarshal Protobuf
    P-->>T: Return Secrets List
    loop For Each Secret
        T->>S: Check Duplicate
        T->>S: Add to List
    end
    T->>S: Write JSON File
    T-->>U: Show Imported Count

4. Manual Add

2fa add -name "MyCheck" -secret "JBSWY3DPEHPK3PXP"

5. Delete

Fuzzy matches name to delete.

2fa del "MyCheck"

Storage

Accounts are stored in ~/.2fa/accounts.json. Keep this file safe!

License

MIT © ybcjcc