stefansundin / 2fa-qr Goto Github PK

Hey there, thanks for your project! 🎉

Can you please confirm that this is just client-side javascript, and that no data gets sent to any server anywhere, and no data is stored after use?

If true, my suggestion is to write that up on the screen for users to see plainly. Many people use this to avoid the Google server. And people who use 2FA are often a bit paranoid 😅 . Having that assurance in plain sight, and that link to the source code that you already have, so that the claim can be checked, would be perfect 👌

Thanks!

hi,

as checked you have consume direct string as base32. please try string containing 1, 8, 9, 0 then it will raise issue in authenticator.

otpauth://totp/Shashank?secret=IAmShashank11111111

solution: convert your secret to base32.
string: IAmShashank11111111
base32: JFAW2U3IMFZWQYLONMYTCMJRGEYTCMI

for your ref
https://emn178.github.io/online-tools/base32_encode.html

then
otpauth://totp/Shashank?secret=JFAW2U3IMFZWQYLONMYTCMJRGEYTCMI

best of luck...