cotp

cotp [OPTIONS] [SUBCOMMAND]

cotp is a trustworthy, encrypted, command-line TOTP/HOTP authenticator written in Rust. It generates both TOTP (Time-based One-Time Password, RFC 6238) and HOTP (HMAC-based One-Time Password, RFC 4226) codes, and also supports Steam, Yandex, and MOTP code generation.
All data is stored in a single encrypted database file using XChaCha20Poly1305 authenticated encryption with Argon2id key derivation. The default location is $HOME/.cotp/db.cotp, configurable via the COTP_DB_PATH environment variable. The interactive TUI dashboard displays all OTP codes with fuzzy search, and clipboard copying works over SSH.

--database-path PATH

Use a custom database file path.

Read the database password from stdin.

Display help for the command or subcommand.

add

Add a new TOTP or HOTP code. Options: --label, --issuer, --type (totp/hotp), --algorithm (SHA1/SHA256/SHA512), --digits, --counter.

Edit an existing OTP entry. Options: --index, --digits.

List all codes. Use --json for JSON output.

Extract a specific OTP code. Options: --issuer, --copy-clipboard.

Import codes from other authenticator apps. Supports: --andotp, --aegis, --aegis-encrypted, --authy, --authy-exported, --cotp, --freeotp, --freeotp-plus, --google-authenticator, --microsoft-authenticator, --otp-uri.

Export/backup the database.

Some import formats (Authy XML, FreeOTP XML, Google Authenticator, Microsoft Authenticator) require extracting data from the phone first and running a Python conversion script from the converters/ directory. On Debian-based systems, building from source requires additional X11 development libraries.

cotp was created by replydev and first released in late December 2020. Written in Rust under the GPL-3.0 license. The latest version is v1.9.7 (September 2025), with 45 total releases. Available in Arch Linux, Debian, Ubuntu, NixOS, and via Homebrew and Cargo.

oathtool(1), pass(1)