Google Authenticator migration decoder

Convert Google Authenticator otpauth-migration://offline?data=... transfer links to plain otpauth links.

Usage

• Navigate to ⋮ → Transfer accounts → Export accounts.
• Extract migration link from QR-code using your preferred software.
• Pass link to otpauth tool.

Flags

  -dump
    	dump as prototext
  -eval
    	evaluate otps
  -http string
    	serve http (e.g. localhost:6060)
  -info
    	display batch info
  -link string
    	migration link (required)
  -qr
    	generate QR-codes (optauth://)
  -rev
    	reverse QR-code (otpauth-migration://)
  -workdir string
    	working directory

Example

go install github.com/dim13/otpauth@latest

Or get latest binary release.

Usage

~/go/bin/otpauth -link "otpauth-migration://offline?data=CjEKCkhlbGxvId6tvu8SGEV4YW1wbGU6YWxpY2VAZ29vZ2xlLmNvbRoHRXhhbXBsZTAC"

Will output:

otpauth://totp/Example:alice@google.com?issuer=Example&secret=JBSWY3DPEHPK3PXP

QR-Codes

~/go/bin/otpauth -qr -link "otpauth-migration://offline?data=CjEKCkhlbGxvId6tvu8SGEV4YW1wbGU6YWxpY2VAZ29vZ2xlLmNvbRoHRXhhbXBsZTAC"
# view and scan *.png in current working directory

Will generate:

Serve http

~/go/bin/otpauth -http=localhost:6060 -link "otpauth-migration://offline?data=CjEKCkhlbGxvId6tvu8SGEV4YW1wbGU6YWxpY2VAZ29vZ2xlLmNvbRoHRXhhbXBsZTAC"

Navigate to http://localhost:6060/

Run as Docker container

docker run --rm -p 6060:6060 -v $(pwd)/workdir:/app/workdir \
    ghcr.io/dim13/otpauth:latest \
    -workdir /app/workdir -http :6060 \
    -link "otpauth-migration://offline?data=CjEKCkhlbGxvId6tvu8SGEV4YW1wbGU6YWxpY2VAZ29vZ2xlLmNvbRoHRXhhbXBsZTAC"

-p 6060:6060
Map the host 6060 to the containr 6060

-v $(pwd)/workdir:/app/workdir
Map the host dir to the containr dir

Navigate to http://localhost:6060/

Related projects

See also https://github.com/dim13/2fa for a simple CLI 2FA evaluator.