keepass2android icon indicating copy to clipboard operation
keepass2android copied to clipboard

OTP and QR codes

Open thebeline opened this issue 3 years ago • 0 comments

On one hand, I would love it if the QR Code reader (at least) were directly integrated. On the other hand, either way, there are some concerns/issues with how QR codes are currently processed with regards to OTPAUTH QR Codes, that I think would be invaluable updates:

otpauth://totp/{domain}%20%28{username}%29?secret={secret}&{... params}

When the QR Plugin detects a QR code of the OTPAUTH format, instead of "Search and open existing" it really should be "Search and Update existing."

Further, when Searching, it should detect the domain and username and search based on the combination, or strictly the username, if the domain is not set or present in any URL fields.

When either Updating or Creating new, it would be logical if it were to:

  • Populate the OTP attribute instead of the Password and URL attribute (this caught me by surprise).
  • Leave the password attribute un-touched.
  • If Creating New, set the username. If Updating, leave it un-touched.
  • If Creating New, set the url attribute to the detected domain. If updating, set the url attribute to the detected domain if the url attribute is empty, or leave it un-touched if it is not empty.

Implementing this change would make keepass2android the GO TO password/authenticator app, IMHO.

As it stands, while I can use it for OTP (it supports it), I don't, as having the "correct" QR code integration is MUCH more helpful. So I am relegated to using other apps, which, is less than ideal.

thebeline avatar May 01 '22 17:05 thebeline