TOTP bogus codes - Githubissues

keepassxreboot / keepassxc

KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.

https://keepassxc.org/

Other

21.39k stars 1.48k forks source link

TOTP bogus codes #11320

Closed robertolopezlopez closed 1 month ago

robertolopezlopez commented 1 month ago

Overview

Steps to Reproduce

Set up TOTP for a website. Let's say: cloudflare.
Enter the secret key from cloudflare into KeepassXC, accept and save database.
Try to validate it using the TOTP code from KeePassXC: cloudflare tells me that it is not valid.

Expected Behavior

KeePassXC should give valid TOTP codes.

Actual Behavior

Cloudflare tells me that the code is not valid.

Context

I have seen this error on cloudflare.com and allegro.pl.
After I have set up TOTP on KeepassXC, I open the kdbx file with other password managers:
- Gnome Secrets (https://gitlab.gnome.org/World/secrets) it gives me the same not valid codes.
- KeePassDX on Android gives me valid codes.

KeePassXC - 2.7.9 Revision: keepassxc 2.7.9-3

Operating System: Linux Arch Desktop Env: XFCE Windowing System: x.org

droidmonkey commented 1 month ago

Sync your computer's time.

robertolopezlopez commented 1 month ago

:laughing: fine, today I have just learned that TOTP and NTP are related

Thank you, @droidmonkey !