0xbb / otp-authenticator

A two-factor authentication App for Android

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Copy code to clipboard on single tap or keyboard

mioux opened this issue · comments

Hello,

A cool feature implemented in Authy app : when you enter an app to get the code, you can tap a button to copy it in the clipboard. As codes are directly shown, I think a simple tap should copy code to clipboard.

Better option, but surely lost complicated could be adding a keyboard with a selector (to choose an account), and a button to send code like if you have typed it manually. (I took this idea to password safe, which handles a keyboard to send passwords in fields.)

commented

Dupe of #1

the copy to clipboard feature encourages bad security practices and therefore I left it out on purpose.

So using this app is a security flaw... when you start the app, it computes all the codes (only one is generally necessary), key is unencrypted in memory, code too.

I think (I may be wrong then :)) that a partial hash result is not enough to get the secret key, even with a lot of times/codes. Google generates a secret with 32 characters (32^32 combination), and this number is not fixed.

@mioux I don't want to encourage people to login on device which the also use as their second factor for authentication.