otty / apps
All apps/Google Authenticator PAM module

Google Authenticator PAM module

google-authenticator-libpam

Example PAM module demonstrating two-factor authentication for logging into servers via SSH, OpenVPN, etc.

Runs as google-authenticator|macOS, Linux|github.com
Open form in Otty otty.toml

Command form

ai-draft · 1 task · 9 fields

Create ~/.google_authenticator for the current user with non-interactive options. Rate limit and window tuning beyond the basics are left out.

Opens the form; the finished command lands at your prompt, unrun
Run in Otty
otty gui google-authenticator-libpam
Set up one-time passcodesExample values, fixed in this page — nothing here reaches a terminal
Basic
Token type
--time-based
Disallow token reuse
--disallow-reuse
Write without asking
--force
Label
string
Issuer
string
QR code mode
3 choicesenum
Advanced
Window size
integer
Emergency codes
integer
Secret file
file
TasksEach one presets the form for one job
Time-based setup
modedisallow_reuseforcelabelissuerwindow_sizeqr_modeemergency_codessecret
ParametersOnly these flags are editable in the form
Token type
boolean
--time-based-t
Disallow token reuse
boolean
--disallow-reuse-d
Write without asking
boolean
--force-f
Label
string
--label-l
Issuer
string
--issuer-i
Window size
Between 1 and 21.
integer
--window-size-w
Secret file
path
--secret-s
QR code mode
enum
--qr-mode-Qnoneansiutf8
Emergency codes
integer
--emergency-codes-e
SourcesEvery flag above is checked against these
man
-c, --counter-based -t, --time-based -w, --window-size=W -W, --minimal-window -D, --allow-reuse, -d, --disallow-reuse -s, --secret=FILE -f, --force -l, --label=LABEL -i, --issuer=ISSUER -Q, --qr-mode=none|ansi|utf8 -e, --emergency-codes=N -q, --quiet
manualmaster 2026-10-27

raw.githubusercontent.com

Before it fills your prompt, Otty checks the installed google-authenticator against its version. A form that does not match your version is not offered.