Add HOTP support

Feature Requests Password Manager
1

Feature name

  • Add HOTP Support

Feature function

  • Support HOTP
4 Likes
2

It would be very helpful to have HOTP support

1 Like
3

Would like to see this along with the ability to append TOTP/HOTP to the password field.
ex: HOTPpassword or passwordHOTP

1 Like
4

This would be a nice feature.

5

I have an important HOTP secret that I use multiple times a week, for which I had to set up something separate from my password manager. I really wish I could use it via Bitwarden.

6

@Anibyl Welcome to the forum!

If it wasn’t too sensitive, would you be willing to share what service this is where you are using that HOTP?

7

I can’t, unfortunately (NDA).

8

Okay, then, are you sure there isn’t any alternative to HOTP? - Well, obviously you can do what you want, and I’m not exactly against this feature request here. The only thing is, HOTP is (AFAIK) already more or less “deprecated”… so I would probably look for alternatives if I were using it (obviously it’s dependent on the service - that’s why I wondered if they offer alternatives). And I personally wouldn’t count on getting it added to Bitwarden.

9

I’m sure. That’s how my client set up their authentication. HOTP is an open standard that is supported by most authenticators. It’s not deprecated, and is used in devices that don’t know what time it is (Yubikey, for instance).
Thanks for your input.

10

I get that you don’t get to dictate how your client architects their security, but I did want to mention that there are very few Yubikeys that support HOTP but not TOTP, all of which were discontinued by 2018. If your client does use yubikeys, you might encourage them to upgrade to Fido2 (passkeys), which has been supported in all Yubikey models sold since 2018.

Although “deprecated” may be a bit strong of a word, I have seen HOTP fall out out common use over the past 20 years.

1 Like
11

Well “more or less deprecated” may have been a bit too far. But HOTP is from 2005 and TOTP from 2008 - and the time-based function has an advantage over the event-based counter. (BTW, YubiKeys can also manage TOTP codes.)

I know, that HOTP is still used. If it wasn’t already added, I’m just not sure it will be - FIDO2 seems more like “the future” here.

12

I am also very much interested in this feature.

I export from Duo the HOTP, it can work in a CLI, but not in Bitwarden.