Setup OTP

To store a master password for totp time pased one time password it must be encoded with base32 as a hash. You can run the the cli script encrypt_decrypt_password_with_base32.py in tools diretory. Command examples see below.
Than you get a base32 hashed password and now have to store this password in the config.yaml under section otp: password:

This password is you supre secure password for the time based one time password generation.
For the TOTP genenration it’s required that you specify some more config settings in config.yaml.
TOTP section in config.yaml section

otp:
  password: "KRSXG5CQIASCIVZQOJCA===="
  length: 6
  interval: 30
  hash_type: sha256

  • The password is your generated base32 hashed password

  • The length is the length of the one time password code.
    By default mostly used is 6 but it recommended to use a higher value upt to 10.

  • The intervalis the time interval how long the password is valid for your input / sending to app.
    By default mostly used in the internet is 30 (seconds).

  • The hash_type is the time based one time password hash algorythm to use.
    Most broadly used ist sha256 (equal to sha2) but i recommend to use sha512 which is equal to sha3.
    Do not use sha1!

It is important to remember this this seetings since these will be required to configure on your Mobile OTP / Authenticator App The generated otp code will than send via telegram chat channel to fdia app to open the door.

Script command options

The script tools/encrypt_decrypt_password_with_base32.py has following command options:

  • --encrypt <here password to encrypt>

  • --decrypt <here password to decrypt>

Example encrypt command:

Command:

tools/encrypt_decrypt_password_with_base32.py --encrypt mySuperSecurePassW0Rd1

Output:

NV4VG5LQMVZFGZLDOVZGKUDBONZVOMCSMQYQ====

Example decrypt command

Command:

tools/encrypt_decrypt_password_with_base32.py --decrypt NV4VG5LQMVZFGZLDOVZGKUDBONZVOMCSMQYQ====

Output:

mySuperSecurePassW0Rd1