Two factor authentication on desktop for GitHub

[hankivy]

I am looking for advice on a two factor authentication application on my Mageia desktop.
Thank you.

I am a developer on GitHub. They seem to want two factor authentication, with a time sensitive codeword, for users with my level of authority. GitHub says,

Authenticator apps and browser extensions like 1Password, Authy, Microsoft Authenticator, etc. generate one-time passwords that are used as a second factor to verify your identity when prompted during sign-in.

I am familiar with the concepts, but always had a proprietary pre-packaged solution to use before.

What open source application would you recommend?

[sturmvogel]

FreeOTP is open source and available for Android and iOS. It is developed by RedHat.
https://play.google.com/store/apps/deta ... ed.freeotp
https://apps.apple.com/us/app/freeotp-a ... d872559395

And simply searching for "open source authenticator app" throws several results...

[hankivy]

Am I correct that these are all either cell phone, or browser add-on applications?

[sturmvogel]

Github requires you to have a TOTP method configured (mobile or desktop)to add later a security key based solution.That means if you want to use a Yubikey as example you still need a TOTP solution to set it up.
https://docs.github.com/en/authenticati ... entication

[doktor5000]

Well two-factor authentication always requires a second factor, e.g. a QR code, an authenticator app or an SMS to the phone. Or an email where you receive a confirmation code. Or some kind of device like a USB key.

You don't have either a phone or an email?

[hankivy]

I have both a cell phone and an email account. I was just trying to use Mageia.

[doktor5000]

Well, you can fetch your email with Mageia that contains the confirmation code. Or connect a Yubikey or similar security key to your Mageia box.
You can also create an SSH key for authentication which is probably the most frequently used solution when working on the CLI.

For native linux authenticator apps, there's authy (although that's proprietary) and also OTPClient (which is open source and available as flatpak).