GoogleAuthenticator icon indicating copy to clipboard operation
GoogleAuthenticator copied to clipboard

Change default secretLength length to 26

Open mokraemer opened this issue 2 years ago • 1 comments

RFC and freeOTP require at least 128 bit, better 160bit and more.

newer freeOTP versions show warnings if the length is less than 128 bit.

mokraemer avatar Jan 26 '23 15:01 mokraemer

Call createSecret(26) works, but the verifyCode function always fails with this generated 128bit secret.

// Only multiple of 8 will work, i.e. 24 or 32. Use 32 if apps like freeotp should not print a warning message

paramazo avatar May 20 '25 13:05 paramazo