search

google / google-authenticator-libpam

Apache License 2.0
1.8k stars 286 forks source link

How to hide the secret key from user profile #91

Closed amitbhatt26 closed 6 years ago

amitbhatt26 commented 6 years ago

I want to hide the secret key from the user's profile .google_authenticator. Is there any way to do this currently?

Key should appear only once on Linux box terminal when we will set it initially and system should not save that key in .google_Authenticator file or it should be in encrypted form?

Thanks Amit Bhatt

ThomasHabets commented 6 years ago

You could use options like secret=/etc/locked-down-dir/${USER}.auth user=some-user where some-user is the only reader/writer of /etc/locked-down-dir.

See the README