Blogi loki päiväkirja

Google, Facebook, Twitter, LinkedIn and many other sites have two-factor authentication. And I also want to have it in some of my projects.

While searching the internet, I found many solutions. All of them are somehow complicated or stuffed with unnecessary features for me. I want a fast and simple solution. So I made my own.

I use Authy desktop service and mobile app for getting the OTP password.

These apps generate 6 digit TOTP (Time based one-time password) for 30 second period. Google requires at least 16 chars long public key or in other word – secret. These are the only guidelines that I need and are widely used.

So I’ve created a PHP class that creates 16 chars long public key in 4×4 chunks for easy reading and generates 6 digit password from the given public key. That it.

$tfa = new tfa();

$pubkey = $tfa->getPubKey(); // WTLA NYJL ZDOR 5OVH

$otp = $tfa->getOtp($pubkey); // 580733

Simple, isn’t it? The rest is in your hand.

Get it from Github: PHP Simple TOTP and PubKey