Skip to content

Full offline (except configuration) TOTP Hardware key, using the nRF52840.

License

Notifications You must be signed in to change notification settings

ICantMakeThings/NiceTOTP

Repository files navigation

NiceTOTP

Verry niceeee ;>

ew dswwe

What is NiceTOTP?

Time-based one-time password (TOTP). aka: 2FA!

A alternetive to Authy / Google Authenticator.

Full offline. And Standalone once all Keys have been added.

Sleep mode after 1 minuite. battery life info at the bottom

press a button or plug it in to charge to wake it

Video here

NEW! Import via scanning the QR code on google auth app. all that and more with the python app in the repo.

But Why??

There are a few reasons why I made this device, mainly to lose dependence of my phone. But not just, What if your phone breaks, bricks, or something else? I rather have lots of devices that don't depend on eachother rather than a all in one for that reason, plus most "universal" stuff performs worse than a specific device for that single function. As of right now, I'd say it's almost complete (enough to daily drive), possibly a few more hardware security features, maybe UI polishing, fixing any bugs i haven't found yet and should be perfect. The cost is ~£6 excluding 3D printing.

Hardware is:

Note: These are referral links. If you purchase through it, I earn a commission at no extra cost to you.

image

Usage

Use the NiceTOTP-Configurator (Firmware update doesnt work rn*)

or you can use serial commands:

  • setunixtime example: setunixtime 1751925355
  • add <username> <base32secret> example: add test JBSWY3DPEHPK3PXP (Compare)
  • list
  • del <GetTheIDFromListCommand> example: del 1
  • factoryreset (Power cycle after)

Installation

  • Build and flash the project with platformio (Make sure you add nicenano support here)
  • Or Drag and drop the .UF2 onto the nicenano drive when doubble clicking reset (short rst pin with usbc sheild tapping twice quickly)

More Info

  • In 2 months the RTC drifted 8s forward.
  • It still shows the right code tho, but that means the last 8 Seconds are invalid. I will need to see whats up with the RTC
  • At month 6 it looked like 50%, battery life seems like a year then.. charging it now so yeah.
  • Make sure not to let it discharge as it will go in a soft brick, to unbrick you just press rst (mentioning it if you glued shut the case like i did when i was done with hardware but not firmware.)
  • If you want protection over phisical attacks, you want to use something like a st-link and run approtect.py which blocks reading firmware, but there will still be other ways to get keys as a hardware hacker, so just noting!!!
More info on my Site

certification-mark-PL000020-wide

About

Full offline (except configuration) TOTP Hardware key, using the nRF52840.

Topics

Resources

License

Stars

Watchers

Forks

Packages

No packages published