AmiAuth is a native two-factor authentication (2FA) code generator for classic
AmigaOS. It implements TOTP (RFC 6238) and HOTP (RFC 4226) - the codes used by
GitHub, Google, Microsoft, banks and countless other sites - so your Amiga can
stand in for a phone authenticator app.
It stores multiple accounts in an (optionally passphrase-encrypted) vault,
generates 6- or 8-digit codes with a live countdown, and - critically for the
platform - tackles the accurate-time problem that TOTP depends on.
Features:
- TOTP (RFC 6238) and HOTP (RFC 4226), 6- or 8-digit codes.
- Multiple accounts in a single vault; import from standard
"otpauth://" URIs. - Optional vault encryption (ChaCha20 + PBKDF2-HMAC-SHA1), with the
passphrase entered interactively only and per-machine KDF calibration. - Accurate time without a working clock: SNTP sync over bsdsocket, a manual
UTC offset, and a locale-based first guess, with an honest red/amber/green
trust indicator. - Two front-ends sharing one portable, RFC-verified core:
- CLI - CODE / ADD / LIST / GET / REMOVE / SYNC / OFFSET.
- GUI - a ReAction interface with a live all-accounts view, clipboard
copy, and QR-image import (decode an "otpauth://" enrolment QR from a
PNG/JPEG/GIF/IFF via a file requester or drag-and-drop).
- The GUI runs as a proper Commodity: it lives in Exchange, pops up on a
hotkey, can start from WBStartup, and is single-instance. While it is
running it owns the unlocked vault, and the CLI transparently forwards
commands to it instead of re-prompting for the passphrase. - Self-contained: no mandatory external libraries or archives to install.
See the wiki for full documentation, and docs/SECURITY.md for the honest threat model.