Feedback Wanted: Open-Source GoogleAuth Desktop Authenticator Built with Rust and Tauri #210659
🏷️ Discussion TypeProduct Feedback Body🔐 Introducing Google Authenticator Desktop: Fast, Secure 2FA for Your Desktop (Rust + Tauri v2)Hi GitHub community! 👋 I'm excited to share Google Authenticator Desktop, an open-source, lightweight 2FA desktop client I've been building with Rust and Tauri v2. 🔗 Repository: github.com/MDFARHYN/GoogleAuth 💡 Why Build This?Like many developers and tech professionals, I spend the majority of my day at my workstation. Constantly reaching for my phone just to grab a 30-second TOTP code interrupts deep focus and workflow. I wanted a native, lightning-fast desktop companion that makes 2FA effortless while keeping security top-of-mind. ✨ Key Features
💬 I'd Love Your Feedback!Since this is an active open-source project, I would love to hear feedback from the community:
Whether you are a Rust developer, Tauri enthusiast, security researcher, or everyday 2FA user, any feedback, critiques, or PRs are warmly welcome! 👉 Check it out here: https://github.com/MDFARHYN/GoogleAuth Guidelines
|
Replies: 1 comment
|
Hello Securing your local data requires prioritizing the integration of native operating system credential managers like the Windows Credential Manager or macOS Keychain via crates like keyring, rather than relying entirely on a standalone encrypted file. To prevent credentials from lingering vulnerability in system RAM or spilling out into core dumps, implementing memory-clearing crates like zeroize ensures that decrypted secret keys are wiped immediately after generating a code. Furthermore, leveraging Tauri v2's backend isolation ensures that sensitive data is well-guarded by never exposing a generic read command to the frontend UI, strictly passing the final 6-digit TOTP code instead. Optimizing the desktop user experience focuses on frictionless shortcuts that keep developers in their flow state without needing to reach for external devices. By mapping a customizable global hotkey like Ctrl + Shift + A, users can instantly pull up a minimal, spotlight-style lookup bar to find an issuer, copy the code via keyboard navigation, and automatically hide the application window. This seamless workflow is bolstered by running the utility as a lightweight background process minimized to the system tray, paired with a secure thread that automatically clears clipboard data after 30 seconds to prevent accidental paste leakages. Deploying a cross-platform Tauri architecture requires addressing minor ecosystem discrepancies, especially concerning system tray behaviors on various Linux desktop environments like GNOME or KDE Plasma. Developers should also verify that their Windows compilation installers are explicitly configured to pull down any missing WebView2 components, protecting deployment on older enterprise machines. Finally, clear user documentation should actively emphasize shortcuts like Win + Shift + S or Cmd + Shift + 4, guiding users to snap a quick region screenshot of a web-based QR code and instantly drop it into the app via a standard clipboard paste. Kind regards |
Hello
Securing your local data requires prioritizing the integration of native operating system credential managers like the Windows Credential Manager or macOS Keychain via crates like keyring, rather than relying entirely on a standalone encrypted file. To prevent credentials from lingering vulnerability in system RAM or spilling out into core dumps, implementing memory-clearing crates like zeroize ensures that decrypted secret keys are wiped immediately after generating a code. Furthermore, leveraging Tauri v2's backend isolation ensures that sensitive data is well-guarded by never exposing a generic read command to the frontend UI, strictly passing the final 6-digit TOTP code instead.
O…