TOTP(1)                                                   TOTP(1)

     NAME
          auth/userpasswd, auth/totp - authentication agent

     SYNOPSIS
          auth/userpasswd fmt

          auth/totp [ -k pattern ] | [ label ]

     DESCRIPTION
          Totp queries and prints the RFC 6238 TOTP code for the spec-
          ified key tuple.  The key tuple is selected using the pro-
          vided label.  This can be used to authenticate with services
          that require time based OTP.

          Userpasswd queries and prints a cleartext user/password pair
          from factotum for the proto=pass key tuple specified in fmt.
          This can be used by shell scripts to do cleartext password
          authentication.  Using plain password authentication with
          factotum is discouraged, as it reveals the secrets in plain
          text.

     EXAMPLES
          Adding a TOTP key to factotum:

               % echo 'key proto=totp label=mylabel secret=ABCDEF123456' \
                    > /mnt/factotum/ctl

          Generating a TOTP key from factotum:

               % auth/totp mylabel
               012345

          Retrieving a password from factotum:

               % auth/userpasswd 'server=setec service=ssh user=ori'
               toomanysecrets

     Page 1                       Plan 9              (printed 7/3/25)