Authenticator
Authenticator copied to clipboard
Option to hide codes (copy/paste only)
Describe the feature you want: Option to visibly hide all OTP codes in popup, click-to-copy should still function as normal by clicking issuer/account name.
Why do you want this feature in Authenticator? I frequently demo systems that require OTP input as only login method, however for larger crowds this dramatically increases the possibility of an opportunistic shoulder-surfing attack. Hiding the codes negates this issue.
Wouldn't they also need to figure out your password before said token expires? This seems like an unlikely scenario.
For projects that use OTP as main login method
By the time the snooper gets around to entering your code, wouldn't it be expired since they are time-based?
TOTP is designed to be the second factor, not the first and only. Whatever system you're using is weird.
Popular open source Android app andOTP has this exact feature
and FreeOTP+ also has this feature
I checked out this extension today and I was surprised to see that it had basically every feature I would ever want except for this one feature. While not strictly necessary, I feel like this would still be a really nice feature to have. It's a pretty common feature among OTP software, so I'd love to see it here too.
I will try to implement this feature in the next release.