Authenticator-Extension / Authenticator-Extension/Authenticator

QR Code is defective in particular circumstances

Open
#1,398 2 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
TypeScript
Stars
4.7k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

### Describe the issue

In particular circumstances, the QR Code «export» for a TOTP credential is defective/invalid.
This QR Code cannot be imported in TOTP app (Google Authenticator, FreeOTP…).

After analysis the problem is at the beginning of the otpauth URL.

A normal otpauth URL starts with otpauth://totp/...
The invalid URL used to create the invalid QR Code in Authenticator-Extension starts with otpauth://1/...

How to reproduce:
- set up Authenticator-Extension
- set up a master password in Authenticator-Extension
- enrol a TOTP token
- display the corresponding QR Code in Authenticator-Extension
- try to enrol this QR Code in any other app

How to work around:
- remove password protection from Authenticator-Extension before enrolling a new token
- set up password protection again after enrolment

### Browser

Firefox

### Browser Version

135.x

### Extension Version

8.0.2

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.