Add TOTP Entry via QR Code

[seniorm0ment]

Summary

Want to suggest the ability to add TOTP entires when you are only given the QR code to authenticate with. Unless this is already implemented, I am unable to find this option? I See the ability to view QR code in KeepassXC but that seems to be only once it's already inputted as an entry. I see no way to actually add via a QR code. I've come across multiple sites that show QR code only.

[vanderboon]

I work round this by getting the secret from a QR code using the QRbot app on iOS, then entering the secret in KeypassXC.

Native capability would be good though. Either accessing a camera or accessing from QR code image URI.

[seniorm0ment]

Even importing from photo would be nice, can screenshot and copy the photo in or something

[droidmonkey]

We would implement this as an image import. Screenshots is also an option but more code.

[dzintars]

Also agree on this.
There are many 2FA backed services which does not expose the secret key, so it's quite painful to add it. Image/screenshot option would be great. But definitely not the critical feature.
If going with screenshot option, probably it's worth to take into account Wayland.
Other option would be something like GIF recorders (speaking from Linux perspective).. where a small transparent widget window is open and you can drag it over the image you want and to press "Capture".

What i do currently is:
Take a picture of selected area

grim -g "$(slurp)" ~/Pictures/Printscreens/screen-"$(date +'%m.%d.%y'-'%T')".png

Read the QR code

zbarimg --raw ~/Pictures/Printscreens/screen-06.02.21-11:55:03.png

Copy the secret key from the output and paste it into KeePass.

If you want, you can make it one-liner as well via piping.

P.S. These are Wayland compatible . Not sure about Xorg compatibility, but i am sure there are alternatives as well.

[darkdragon-001]

For image import, I suggest to support the following workflows:

• Load from file
• Load from clipboard

A nice add-on would be to select the image via browser-plugin (e.g. via right-click on image).

[ygoe]

The OTP plugin for Keepass can already capture QR codes from screenshots. Although when I tried last time (a few days ago) it would freeze Keepass for a few minutes. Maybe it's broken now. But it has already been very useful in the past.

Getting a screenshot with Win32 API is very simple, GetDC(0) and then read from it. IIRC. I've written Win32 C code many years ago. Looks like this is a C program, so it might work. Reading from an image in clipboard is probably the same code anyway.

Be sure to hide the app windows, then take the screenshot after a short delay and then show the app windows again.

[goetzc]

As a possible inspiration, the 1Password browser extension has a handy way of doing this, with the option to directly scan the QR code from a website:

[K4zoku]

Also agree on this. There are many 2FA backed services which does not expose the secret key, so it's quite painful to add it. Image/screenshot option would be great. But definitely not the critical feature. If going with screenshot option, probably it's worth to take into account Wayland. Other option would be something like GIF recorders (speaking from Linux perspective).. where a small transparent widget window is open and you can drag it over the image you want and to press "Capture".

What i do currently is: Take a picture of selected area

grim -g "$(slurp)" ~/Pictures/Printscreens/screen-"$(date +'%m.%d.%y'-'%T')".png

Read the QR code

zbarimg --raw ~/Pictures/Printscreens/screen-06.02.21-11:55:03.png

Copy the secret key from the output and paste it into KeePass.

If you want, you can make it one-liner as well via piping.

P.S. These are Wayland compatible . Not sure about Xorg compatibility, but i am sure there are alternatives as well.

I've just written oneliner command for Xorg

maim -s | zbarimg --raw -q - | xclip -i

[LoNicoM]

Would be nice if there was a screenshot feature to capture the QR code.

[mahescho]

Count me in to keep this alive. My current workaround ist to scan with my smartphone and extract the secret.

[droidmonkey]

Almost always, the secret is listed right below the qr code. Sometimes, you have to hit an "advanced" drop down.