# Install totp-cli with Homebrew, MacPorts, Nix, winget Authy/Google Authenticator like TOTP CLI tool written in Go. Version 1.9.2 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:totp-cli ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install totp-cli ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install totp-cli ``` Evidence: MacPorts ports tree: security/totp-cli/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - Nix (92%): ```sh nix profile install nixpkgs#totp-cli ``` Evidence: nixpkgs package indexes: pkgs/by-name/to/totp-cli/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ### Windows - winget (92%): ```sh winget install --id yitsushi.totp-cli -e ``` Evidence: Windows Package Manager source index: yitsushi.totp-cli from https://cdn.winget.microsoft.com/cache/source.msix ## Package facts - **Package key:** brew:totp-cli - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.9.2 - **Source summary:** Authy/Google Authenticator like TOTP CLI tool written in Go - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** MIT - **Source archive:** - **Generated:** 2026-07-08T18:08:21+00:00 ## Executables - totp-cli (cli) - totp-cli (alias) ## Build dependencies - go ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 1.9.2 - Local data: ok - Upstream repository: https://github.com/yitsushi/totp-cli - Upstream latest detected: v1.9.2 (current) - info: No package-manager update timestamp was available. ## Project history and usage totp-cli is a small Go command-line authenticator for managing and generating time-based one-time passwords. Its project documentation frames it as an Authy or Google Authenticator style tool for the terminal, with encrypted local storage protected by a user password. ### Project history The public release line on GitHub dates back to version 1.0.0 in September 2016. Later documentation records a storage-format migration in version 1.2.8, where stored credentials were upgraded to a more secure format the next time totp-cli wrote to storage. ### Adoption history The project is packaged beyond its Go install path: the official README documents installation through winget, MacPorts, and Homebrew, while the Homebrew source facts also list MacPorts, Nix, and winget package identifiers. That puts it in the package-manager niche of small security utilities installed directly onto developer workstations. ### How it is used Typical use is local and interactive: users add tokens under namespaces, generate codes by namespace and account, list stored accounts, import YAML dumps, and optionally run an instant mode from an environment variable or stdin without using the storage backend. ### Why package nerds care For package nerds, totp-cli is notable less as infrastructure and more as a classic single-purpose terminal security tool: one binary, shell completions, signed release checksums, and package-manager availability for people who prefer authentication workflows inside the shell. ### Timeline - 2016: Version 1.0.0 published on GitHub Releases. - v1.2.8: Documentation notes a more secure storage format and automatic credential-store upgrade. - 2025: GitHub Releases list v1.9.2 as a later release in the 1.x line. ### Related projects - The README explicitly positions totp-cli against Authy and Google Authenticator as a command-line equivalent for TOTP workflows. ### Sources - - - source_facts.package-manager ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Credential files - Unix: ${HOME}/.config/totp-cli/credentials ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** totp-cli - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - totp-cli: normalized package name match | nixpkgs package indexes: pkgs/by-name/to/totp-cli/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - MacPorts - totp-cli: normalized package name match | MacPorts ports tree: security/totp-cli/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - winget - yitsushi.totp-cli: normalized package name match | Windows Package Manager source index: yitsushi.totp-cli from https://cdn.winget.microsoft.com/cache/source.msix ## Related links - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Language runtime packages](https://www.automicvault.com/pkg/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [oath-toolkit](https://www.automicvault.com/pkg/brew/oath-toolkit/) - Shares av.db curated category or tags: authentication, cli, otp, security, totp. - [steamguard-cli](https://www.automicvault.com/pkg/brew/steamguard-cli/) - Shares av.db curated category or tags: 2fa, authentication, cli, security, totp. - [google-authenticator-libpam](https://www.automicvault.com/pkg/brew/google-authenticator-libpam/) - Shares av.db curated category or tags: authentication, cli, security, totp. - [libyubikey](https://www.automicvault.com/pkg/brew/libyubikey/) - Shares av.db curated category or tags: authentication, cli, otp, security. - [rsc_2fa](https://www.automicvault.com/pkg/brew/rsc-2fa/) - Shares av.db curated category or tags: authentication, cli, security, totp. - [cotp](https://www.automicvault.com/pkg/brew/cotp/) - Shares av.db curated category or tags: authentication, cli, security, totp. - [cyrus-sasl](https://www.automicvault.com/pkg/brew/cyrus-sasl/) - Shares av.db curated category or tags: authentication, cli, security. - [gauth](https://www.automicvault.com/pkg/brew/gauth/) - Shares av.db curated category or tags: authentication, cli, security, totp. ## Combined YAML source View the package source record on GitHub. [combined/totp-cli.yml](https://github.com/automic-vault/db/blob/main/combined/totp-cli.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph