TOTP(1)                                                   TOTP(1)

     NAME
          auth/userpasswd, auth/totp - authentication agent

     SYNOPSIS
          auth/userpasswd [ -n ] fmt

          auth/totp [ -k pattern ] | [ label ]

     DESCRIPTION
          Totp queries and prints the RFC 6238 TOTP code for the spec-
          ified key tuple.  The key tuple is selected using the pro-
          vided label.  This can be used to authenticate with services
          that require time based OTP.

          Userpasswd queries and prints a cleartext user/password pair
          from factotum(4) for the proto=pass key tuple specified in
          fmt.  Option -n suppresses prompting for the key if it
          doesn't exist.  Userpasswd can be used by shell scripts to
          do cleartext password authentication; using plain password
          authentication with factotum is discouraged, as it reveals
          the secrets in plain text.

     EXAMPLES
          Adding a TOTP key to factotum:

               % echo 'key proto=totp label=mylabel !secret=ABCDEF123456' \
                    > /mnt/factotum/ctl

          Generating a TOTP key from factotum:

               % auth/totp mylabel
               012345

          Retrieving a password from factotum:

               % auth/userpasswd 'server=setec service=ssh user=ori'
               toomanysecrets

     SEE ALSO
          factotum(4)

     Page 1                       Plan 9            (printed 10/25/26)