Editing
2-Factor Authentication
(section)
Jump to navigation
Jump to search
Warning:
You are not logged in. Your IP address will be publicly visible if you make any edits. If you
log in
or
create an account
, your edits will be attributed to your username, along with other benefits.
Anti-spam check. Do
not
fill this in!
== How to add 2-factor authentication info to KeePassXC == Download KeePassXC from https://keepassxc.org/download/. # In your main database, if you have not already written your Rose-Hulman username and password in the database: Make a new entry for your Rose-Hulman network account. Go to Entries > New Entry. Enter your username and password and click OK. Press <code>Ctrl + S</code> to save the KeePass database. # Make a separate database for your 2-factor authentication tokens and keep it in a different location (e.g., off of cloud storage and on your hard drive only). This is recommended for security reasons. Source: [https://keepassxc.org/docs/#faq-security-totp KeePassXC FAQ] # Make a new entry called "RHIT 2-Factor" for your RHIT 2-factor authentication token in that database. Go to Entries > New Entry. You can leave username and password blank. (You can call it something else, but I use this name for the purposes of this tutorial.) # In the entry, go to Advanced > Attachments. Click "Add" and add the QR code image that you downloaded in your Downloads folder. Click OK at the bottom and press Ctrl + S inside of KeePassXC. # Delete the QR code image from your Downloads folder. # We will now read the QR code to get the 2-factor authentication "secret". This is how KeePassXC generates the 2-factor authentication code you use to log in. ## On Linux or Windows Subsystem for Linux, you can read a QR code through the <code>zbarimg</code> tool. To do this, open up a terminal (<code>Ctrl+Alt+T</code> on most Linux distros) and perform the following commands: ### Ubuntu-based distros: <code>apt-get install zbar-tools</code> ### Type <code>cd ~/Downloads</code> (may be different on Windows) and then type <code>zbarimg <whatever you saved your image as>.png</code> ### You should see something like this text (YOUR_EMAIL and SOME_STRING_OF_LETTERS_AND_NUMBERS are different since it's a different user that generated the QR code, but you should see your network email under YOUR_EMAIL and a bunch of letters and numbers under SOME_STRING_OF_LETTERS_AND_NUMBERS): #### <code>QR-Code:otpauth://totp/Rose-Hulman%20Institute%20of%20Technology%3AYOUR_EMAIL%40rose-hulman.edu?secret=SOME_STRING_OF_LETTERS_AND_NUMBERS&issuer=Microsoft</code> ### Copy the text under SOME_STRING_OF_LETTERS_AND_NUMBERS and put it into a blank text document (e.g. through Notepad). This is called the '''secret'''. # Right-click on the KeePassXC entry called "RHIT 2-Factor" and go to TOTP > Set Up TOTP. # Paste in the '''secret''' you put in a blank text document and paste it under "Secret Key". Leave all the other settings alone and click OK. # Press <code>Ctrl + S</code>. Go back to 5. and then look at 1. under that inside the "Look Here First - Getting Started" section. Sources: https://blog.paranoidpenguin.net/2020/05/how-to-back-up-your-2fa-secret-keys-with-keepassxc/, https://askubuntu.com/questions/22871/software-to-read-a-qr-code
Summary:
Please note that all contributions to RHLUG Wiki may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see
RHLUG Wiki:Copyrights
for details).
Do not submit copyrighted work without permission!
Cancel
Editing help
(opens in new window)
Navigation menu
Personal tools
Not logged in
Talk
Contributions
Log in
Namespaces
Page
Discussion
English
Views
Read
Edit
Edit source
View history
More
Search
Navigation
Main page
Recent changes
Random page
Help about MediaWiki
Tools
What links here
Related changes
Special pages
Page information