macOS
Homebrewverified · 100%
brew install totp-clilocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install totp-cliMacPorts ports tree · security/totp-cli/Portfile · source: api.github.com
brew / rank 5924
Install totp-cli with Homebrew, MacPorts, Nix, winget
Authy/Google Authenticator like TOTP CLI tool written in Go. Version 1.9.2 via Homebrew; verified 2026-07-26. Also installable with nix: nix profile install nixpkgs#totp-cli.
install
Additional install commands
Linux
Nixverified · 92%
nix profile install nixpkgs#totp-clinixpkgs package indexes · pkgs/by-name/to/totp-cli/package.nix · source: api.github.com
Windows
Windows Package Managerverified · 92%
winget install --id yitsushi.totp-cli -eWindows Package Manager source index · yitsushi.totp-cli · source: cdn.winget.microsoft.com
overview
Package summary
Authy/Google Authenticator like TOTP CLI tool written in Go
Project links
Commands and aliases
- totp-cli
history
Project history and usage
totp-cli is a small Go command-line authenticator for managing and generating time-based one-time passwords. Its project documentation frames it as an Authy or Google Authenticator style tool for the terminal, with encrypted local storage protected by a user password.
Project history
The public release line on GitHub dates back to version 1.0.0 in September 2016. Later documentation records a storage-format migration in version 1.2.8, where stored credentials were upgraded to a more secure format the next time totp-cli wrote to storage.
Adoption history
The project is packaged beyond its Go install path: the official README documents installation through winget, MacPorts, and Homebrew, while the Homebrew source facts also list MacPorts, Nix, and winget package identifiers. That puts it in the package-manager niche of small security utilities installed directly onto developer workstations.
How it is used
Typical use is local and interactive: users add tokens under namespaces, generate codes by namespace and account, list stored accounts, import YAML dumps, and optionally run an instant mode from an environment variable or stdin without using the storage backend.
Why package nerds care
For package nerds, totp-cli is notable less as infrastructure and more as a classic single-purpose terminal security tool: one binary, shell completions, signed release checksums, and package-manager availability for people who prefer authentication workflows inside the shell.
Timeline
- 2016: Version 1.0.0 published on GitHub Releases.
- v1.2.8: Documentation notes a more secure storage format and automatic credential-store upgrade.
- 2025: GitHub Releases list v1.9.2 as a later release in the 1.x line.
Related projects
- The README explicitly positions totp-cli against Authy and Google Authenticator as a command-line equivalent for TOTP workflows.
Sources
- https://api.github.com/repos/yitsushi/totp-cli/releases
- https://github.com/yitsushi/totp-cli#readme
- source_facts.package-manager
security posture
Risk level: green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
${HOME}/.config/totp-cli/credentials
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
totp-cli | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version1.9.2
manager updated2026-07-26
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:totp-cli |
|---|---|
| Version | 1.9.2 |
| Package manager | Homebrew |
| Homepage | https://yitsushi.github.io/totp-cli/ |
| Repository | https://github.com/yitsushi/totp-cli |
| Last updated | 2026-07-26T00:51:25+02:00 |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
totp-cli
nix profile install nixpkgs#totp-cli- normalized package name match
- Matched by: Totp Cli
MacPorts95%
totp-cli
sudo port install totp-cli- normalized package name match
- Matched by: Totp Cli
winget95%
yitsushi.totp-cli
winget install --id yitsushi.totp-cli -e- normalized package name match
- Matched by: Totp Cli
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- pkg.so package database
- pkgdb category and tag curation