OTPWCalc

What is a One Time Password?

A One Time Password (OTP) is a password valid only for a single use and, once used, cannot be used again for authentication. OTPs avoid a number of shortcomings that are associated with traditional (static) passwords.

What can I do with this app?

This application serves one purpose only. It calculates and prints a OTP.

What can I do with OTPs?

Most people use OTPs to log in to their website administration, CMS, or remote console.

Can I log into my Google account?

No. Google uses OTPs, but in a slightly nonstandard way. OTPWCalc cannot calculate OTPs useful for Google authentication yet.

Can I log in to Win/OSX/Oracle?

Yes, but some work is needed on the Windows/OSX/Oracle computer to configure the authentication subsystem.

Can I log in to Unix/Linux?

Yes, by using PAM and it's quite easy.

What else can I do with it?

Impress your friends
VPN authentication
Single sign on
Remote access
Computer login
Disk encryption
Internet services
Systems integration
CMS authentication
Password management
Email and money transfer
Bank transaction validation

Can I install OTPWCalc on …?

FirefoxOS: Yes
Sailfish: No
Android: No
Tizen: Yes
MeeGo: No
Bada: No
iOS: No
Unix: No
Linux: No
Mac OSX: No
BlackBerry QNX: No
Windows Phone: Yes
Windows Store: Yes

Why isn't OTPWCalc compatible?

OTPWCalc might not be compatible with your platform of choice, usually because the necessary hardware isn't available to the author for development.

What happens to my password?

Take a look at the entry point in + main.js:


+                       var secr = $('#paswrd').val();

+                       var resp = hash(secr, user, iter);
+

In other words, the password you enter is neither stored nor transmitted. In fact, OTPWCalc doesn't store or transmit any data input at all (see James Bond question later.) It's a calculator in the true sense, just like a pocket calculator that adds numbers.

Is OTPWCalc safe and secure?

The algorithms of OTP have proven worthy of high security applications. OTPWCalc has been carefully designed and is tested thoroughly. It's both secure and safe to use.

Is it useful in a corporate setting?

Yes. Custom built enterprise versions are available accompanied with commercial support. Visit the OTPWCalc homepage for information.

Does James Bond use OTPWCalc?

Maybe, but spies probably just look over shoulders or use cameras to steal the static passwords used in OTP systems.

Same as Yubikey or RSA SecurID?

Yubikey, RSA SecurID, and OTPWCalc use similar technologies for similar applications, but OTPWCalc is strictly software and doesn't depend on the time or date.

How can I upgrade my OTPWCalc?

This varies according to the operating system used so there's no single answer.

Who owns OTPWCalc?

OTPWCalc is the property of the copyright holder, Michael Schloh von Bennewitz.

Is OTPWCalc licensed?

OTPWCalc is distributed under the terms of the European Union Public Licence. This liberal license grants you freedom to use the software and much more.

Which programming language?

OTPWCalc is built using the HTML, CSS, and JavaScript languages.

The jQuery Mobile and Apache Cordova development frameworks provide important additional features.

What are ongoing developments?

OTPWCalc is both active and stable, and follows a project management plan.

It is undergoing i18n and l10n to several european languages.
HMAC-based RFC 4226 (HOTP) is being implemented.
Features like QR and OpenID integration are being explored.
Most of all, OTPWCalc is being ported to new platforms.

To request features or pose questions please write to the mailing list.

How can I report a bogue (bug)?

Please write to the mailing list stating the OTPWCalc version and platform. Thanks for every bug report!

My question isn't answered,
or this is just not working!

Please turn to the mailing list and ask for help there. Answers appear in a day.