OTP Vault

Sign in

Staff access. Sessions are server-side and expire after 8 hours.

{{ loginErr }}
Secure OTP Access

Enter Access PIN

Each PIN works once and shows at most two consecutive codes.

{{ checkErr }}
Reloading · restoring session from cookie…
Service {{ ses.serviceName }}
Masked secret {{ ses.secretHint }}
{{ ses.cycleLabel }} {{ ses.otpText }}
{{ ses.remText }}

{{ ses.note }}

OTP access expired.

Please request a new PIN.

403 · FORBIDDEN

You don't have access to this page

Your role doesn't permit this action. The attempt was recorded in the audit log.

vault.local{{ path }}
{{ userName }} {{ userRole }}

Overview

Key inventory, PIN activity and OTP sessions.

{{ s.label }}
{{ s.value }}
Live codes
{{ k.serviceName }} {{ k.secretHint }}
{{ k.otpText }} {{ k.remShort }}
Audit log NO SECRETS · OTPs · PINs
{{ a.action }} {{ a.when }} {{ a.detail }} {{ a.ip }}

TOTP keys

Codes are generated on the server. Secrets never leave it.

{{ k.serviceName }} {{ k.accountLabel }}
{{ k.bLabel }}
Secret {{ k.secretHint }}
{{ k.otpText }} {{ k.remText }}
No keys match “{{ search }}”.

Add TOTP key

The secret is entered once, encrypted with AES-256-GCM on the server and never shown again.

Stored hint{{ hintPreview }}
AlgorithmSHA-1
Digits · Period6 · 30s
{{ fErr }}
KEY SAVED · ENCRYPTED
{{ saved.serviceName }} {{ saved.accountLabel }}
Secret{{ saved.secretHint }}

The full secret has been cleared from this page and will not be displayed again.

Access PINs

Only PIN hashes are stored. Plaintext is shown once at creation.

SERVICEMASKED KEYSTATUSCREATEDEXPIRESUSED
{{ p.serviceName }}{{ p.accountLabel }}
{{ p.secretHint }} {{ p.bLabel }} {{ p.created }} {{ p.expires }} {{ p.used }}
No PINs match this filter.
Generate access PIN Single-use · maximum 2 OTP codes
PIN expires after
{{ mErr }}
One-Time Access PIN
{{ m.pin }}
Service{{ m.serviceName }} AccessMaximum 2 OTP codes Expires{{ m.expiresLabel }}
This PIN will only be shown once.
Delete {{ m.serviceName }}? The encrypted secret is destroyed. Unused PINs are revoked and active OTP sessions end immediately. This can't be undone.
{{ toast }}