
OTPClient is a secure and easy-to-use desktop client for TOTP and HOTP one-time passwords, built with GTK4 and libadwaita. Features:
- multiple databases with sidebar management and cross-database search
- token grouping with quick filtering
- desktop search provider for GNOME Shell and KDE KRunner (opt-in trigger keyword)
- command-line companion (otpclient-cli) with scriptable table/JSON/CSV output
- support for TOTP, HOTP, and Steam codes
- configurable digits (4 to 10), period (10 to 120 seconds), and algorithm (SHA1, SHA256, SHA512)
- import and export of encrypted/plain Aegis backups
- import and export of encrypted/plain Authenticator Pro and 2FAS backups
- import and export of plain FreeOTP+ backups (key URI format)
- import of Google Authenticator migration QR codes (file, screen, webcam, clipboard)
- integration with the OS secret service provider via libsecret (opt-in)
- local database encrypted with AES-256-GCM and Argon2id key derivation; plaintext lives only in libgcrypt secure memory while unlocked