auxydize

Auxydize allows you to store, manage, and use your Time-Based One-Time Password secrets on the command line.

For SEO: This is basically Google Authenticator as a CLI.

➜  ~ aux get
CODE   ISSUER NAME                    LIFETIME        
123062 Reddit [e-mail] 8s       current
012415 Google TestyMcTesterton        8s       current

Installation

npm install -g auxydize --production

Usage

Import secrets:

$ aux import --file ~/Desktop/google-authenticator-qr-code.png
[aux]# reddit successfully imported.
[aux]# Github:[e-mail] successfully imported.

Generate TOTPs to satisfy an authentication challenge:

$ aux get --alias reddit
CODE   ISSUER NAME                            LIFETIME
844777 Reddit [e-mail] 8s       current

View a secret's metadata:

$ aux details --alias reddit
KEY       VALUE
name      [e-mail]
issuer    Reddit
alias     reddit
algorithm sha1
digits    6
interval  30
tzero     0
secret    <masked>

Notes:
First Reddit account I ever made! Woo!

Add a secret manually:

$ aux set --alias second-reddit --name [e-mail] --issuer Reddit --secret "0f a3 9d bb 3e 10 18 7f 1c 94"
[aux]# second-reddit successfully inserted.

Edit a secret's metadata:

$ aux edit --alias reddit --newalias first-reddit --notes "Made a throwaway account, added 2FA to that, now I need to make sure I can distinguish them in my secret manager"
[aux]# Updated secret 'reddit'

Remove a secret:

$ aux rm second-reddit
✔ REMOVING A SECRET CANNOT BE UNDONE. Are you sure you want to remove the specified secret? … yes
[aux]# Deleted secret with alias: second-reddit

List all secrets:

aux ls
ISSUER    : NAME                                 : ALIAS
Reddit    : [e-mail]      : first-reddit
Github    : [e-mail]      : Github:[e-mail]

Encrypt your local secrets database:

$ aux encrypt
[aux]# THIS COMMAND ENCRYPTS YOUR SECRETS DATABASE.
[aux]# IF YOU LOSE THE PASSWORD, THIS CANNOT BE UNDONE AND YOU WILL LOSE ALL SECRETS.
✔ Enter password to use for encryption (whitespace will be trimmed): … ****
✔ Re-enter password: … ****
[aux]# DB encrypted.

Decrypt your local secrets database:

$ aux decrypt
[aux]# Secrets database is encrypted.
✔ Please enter the database password: … ****
✔ Are you sure you want to decrypt the database? … yes
[aux]# DB decrypted.

Export your secrets:

$ aux export -qg --filepath ~/Desktop/export-qr-to-scan-with-google-authenticator.png
[aux]# Successfully wrote QR code to /home/testymctesterton/Desktop/export-qr-to-scan-with-google-authenticator.png

Contributing

Feel free to make PRs, but at this time I cannot commit to any level of responsiveness; your PR might sit unaddressed for a while, or forever.

Problems?

File an issue. Please search existing issues first.