OTP Links
#########

:category:  Misc
:date:      2020-08-26 16:43:00 +0300
:tags:      otp, 2factor

Have you ever seen an one time password link in a regular ``<a>`` tag?

Here is an example TOTP link from Google Authenticator repo::

    otpauth://totp/Example:alice@google.com?secret=JBSWY3DPEHPK3PXP&issuer=Example

The most familiar form for them is QR codes:

.. image:: /images/misc/otp-links/qr.png
   :alt: QR code for the link above

Which is a problem if you're alterady on your mobile device and you can't scan it.
For this case there is usually a text like "Please manually add the key ``JBSW Y3DP EHPK 3PXP`` to your Authenticator app".
But what about the link itself?
Well, just try it on your phone: `click me`__.

.. __: otpauth://totp/Example:alice@google.com?secret=JBSWY3DPEHPK3PXP&issuer=Example

I'm really shocked that it works perfectly and that I have never seen this simple and very web style solution in action.