Question about andOTP and Google

[danjde]

Hi Devs!
I would only to know if is it possible to use andOTP without any infrastructure Google, or if andOTP is properly a Google Authentication client.

Thanks!

Davide

[flocke]

Hello Davide,

andOTP is completely independent of Google. It just implements the same algorithms as Google Authenticator, namely HOTP and TOTP. You can use it as a replacement for Google Authenticator on almost all sites that support those algorithms.

Cheers,
Jakob

[danjde]

Hi Jakob and thanks for your reply!
Excuse me but I'm newbie to 2FA, and I don't understand well how work andOTP.
andOTP is a client side application if I understand, but what is the andOTP server side?
Could you show me a short documentation or something like that around the andOTP working?

Many thanks!

Davide

[schwedenmut]

Probably (except for the RFCs) https://www.freecodecamp.org/news/how-time-based-one-time-passwords-work-and-why-you-should-use-them-in-your-app-fdd2b9ed43c3/ has some nice explanation around 2FA HOTP and TOTP with pseudo-code.

[RichyHBM]

andOTP is a client only application, there is no server side application

[flocke]

Like Richy said, there is no server side. Most sites/servers have their own implementation. But it is a standard protocol, so one app works for most implementations.

[danjde]

Well!
I will do some test for Joomla and Wordpress login.

Thanks again to all!!

Davide

[danjde]

Ok, I've done some tests and then apply the 2FA to some of my websites (wordpress/wordfence and Jooma/native) and all works fine!
Just a note: I didn't see from the vary choice of images Joomla!

Thanks!

Davide

[flocke]

Nice to hear everything works 👍

Could you maybe open another issue for the Joomla icon? That way we can better keep track.

[danjde]

Nice to hear everything works +1

I will test on Nextcloud too and many others ;-)

[flocke]

I use it on my Nextcloud as well. There is a TOTP app that you can install.

[danjde]

I use it on my Nextcloud as well. There is a TOTP app that you can install.

Well, confirm, on Nextcloud 13/14 all works fine using andOTP, 2FA admin too ;-)

Thanks!

[schwedenmut]

Well it should work because andOTP follows the RFC for both methods. So every system side implementation following the RFC and beeing standard conform will work 👍.

[danjde]

Well, I've used for Nextcloud side "Two-Factor TOTP Provider"

Thanks again!
Davide