AChep / keyguard-app

Keyguard is an alternative client for the Bitwarden® platform, created to provide the best user experience possible.
https://play.google.com/store/apps/details?id=com.artemchep.keyguard
Other
1.02k stars 33 forks source link

Cannot link account while Duo is enabled #378

Open ACCESSDENIIED opened 2 months ago

ACCESSDENIIED commented 2 months ago

I was previously able to login and sync my vaults but tldr; I tried a few other PW managers over the last month and settled on BW with Keyguard.

Here's a screenshot:

Screenshot_20240602_192350_Keyguard.jpg

ACCESSDENIIED commented 2 months ago

Apologies, more context:

When I decided to return to BW I purchased premium and then setup Duo 2FA. Since then I haven't been able to use Keyguard.

raulvasquez commented 1 month ago

The passcodes that Duo generated are HOTP codes which unfortunately bitwarden itself does not support. The only type of one time passcodes that bitwarden supports are the TOTP variety.

I haven't dug to deep into keyguard, but I do see some references in it's code for HOTP passcodes, but I'm not sure if there is actually a way within keyboard to specify that the OTP secret is for an HOTP code and also a way to increment the required HOTP counter for the protocol.

It would be great if keyguard could provide the missing HOTP functionally as a workaround to bitwarden's lack of HOTP support.

AChep commented 1 month ago

The passcodes that Duo generated are HOTP codes which unfortunately bitwarden itself does not support. The only type of one time passcodes that bitwarden supports are the TOTP variety.

I haven't dug to deep into keyguard, but I do see some references in it's code for HOTP passcodes, but I'm not sure if there is actually a way within keyboard to specify that the OTP secret is for an HOTP code and also a way to increment the required HOTP counter for the protocol.

It would be great if keyguard could provide the missing HOTP functionally as a workaround to bitwarden's lack of HOTP support.

Keyguard will generate a correct HOTP, but it won't increment the counter.