Name: OTP Authenticator
Rating: 4.6 (105 reviews)
Author: SebastianNagel

Most popular (by reviews) ConnectIQ Widget for One-Time Passwords as Second Factor Authentication (2FA) similar to Google Authenticator, Authy and the likes.

Keys can be entered directly and are stored encrypted using Garmin's application storage. This way, the secret keys will never leave your device and can provide a truly secure second factor!

Feedback via reviews appreciated and if you like this app, consider buying me a coffee: https://ko-fi.com/ch1bo

## Features

* Instant preview of all One-Time Passwords
* Standalone, offline and no companion Smartphone App required
* Encrypted storage of keys, can be backed up and restored
* Direct input of names and keys on device
* Import/export and add new entries via settings
* Edit provider name, key and type from action menu
* Supported types
  - Timed One-Time Passwords (TOTP) using SHA1 with 30 sec interval and 6 digit codes (not configurable)
  - Counter-based One-Time Passwords (HOTP) using SHA1 with 6 digit codes (not configurable)
  - Steam Guard compatible One-Time Passwords
* Supports 150+ Garmin devices (touch, button, round, square, etc.)
* Supports 50+ entries (only bounded by device memory)

## Getting started

1. Add widget to your device and access it
2. Start via Configure, New provider
3. Pick a name for your first provider entry
4. Enter the secret key of your first provider key
  - This step highly depends on the service use like to authenticate
  - Usually you will be provided a QR Code
  - If available, use "manual entry" to get access to the actual key
  - Or you can use a QR Code Reader APP to decode the QR Code
  - The secret key looks like: "32QXEKZZXO2ZVJJDWU2KTTDUZ52Q4USN"
5. Pick the provider type, most likely its a time-based (TOTP) code

## Backup / Restore

Keys are stored encrypted using Garmin's application storage on the Device. In the past the application storage was not retained when updating a widget to a newer version, but this seems to be no issue anymore (since CIQ 3.0.0?). However, entered provider data along with secret keys are quite naturally wiped when removing or reinstalling the App.

To provide an easy way of data migration, e.g. when switching Garmin devices an export/import mechanism was added!

### Export keys

To export keys from the encrypted application storage, open the menu in the "OTP Authenticator" widget (touch or menu button). When selecting "Export", all provider entries are copied into application properties **until next start**. You can access the exported data in the Settings of the widget.

**IMPORTANT** Secrets are available unencrypted in settings after exporting until the next start. Make sure you backup the exported data in a secure way, e.g. in your password manager with encrypted storage. Also, there is a chance that this leaks the payload to the garmin servers!

### Import keys

Using the same approach as above, previously exported key data can be imported again via the Widget settings. On every widget start, all available data is loaded and cleared from the corresponding settings entry.

## Open Source

For more details, planned features and how to contribute on Github: https://github.com/ch1bo/garmin-otp-authenticator/