{"repo":"eustasy/authenticatron","free":true,"listed":false,"github":"https://github.com/eustasy/authenticatron","clone":"git clone https://github.com/eustasy/authenticatron.git","description":"PHP-LIB: HOTP / TOTP secrets with corresponding QR links and code verification from a simple PHP script.","language":"HTML","stars":11,"topics":["secret","php","authentication","security","totp","2fa","webauthn","passwords","composer-packages","two-factor-auth"],"license":"MIT","category":"auth-billing-email","readme_excerpt":"Authenticatron A simple PHP script to create HOTP / TOTP / Google Authenticator secrets, corresponding QR links and code verification. Based on the original BSD 2 Licensed work found at PHPGangsta/GoogleAuthenticator Heavily modified to improve security and suit our needs. Requirements PHP = 8.2 ext-gd (e.g. php8.x-gd ) for QR Code generation. jysperu/php-qr-code — installed automatically via Composer. Installation If you already use Composer then the eustasy/Authenticatron package can be easily installed. Require the class in your PHP code: Quick Implementation How it Works Rather than rely on expensive SMS (text messages) that lack global deliverability, Google Authenticator does not even require a network connection to generate its codes. Instead, simply scan the generated QR code with your camera, and receive a new, 6-digit second factor of authentication from your phone every 30 seconds. It does this by generating a 16 character secret, or seed, that is then encoded as a special URL, along with some identifying information, and outputted as a QR code. The phone reads the codes, and the Google Authenticator app runs the secret through a code generation process to output a time-restricted code. The website follows the same process to produce matching codes without actually having to communicate further. Potential Flaws & How to Avoid them Secret Capture If you hand off the secret to a service like Google Charts as some demos show, then it would be trivial to compromise the","default_branch":null,"files":null,"tree":[],"storefront":"/r/eustasy","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/eustasy/authenticatron/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}