Set up Safari (and iCloud Keychain) with your E*Trade TOTP 2FA

gistfile1.md

Adapted from the tips from Paul Sambolin: https://paulsambolin.com/posts/symantec-vip/

Install pre-requisites:

• Install Homebrew

• Install Docker:

brew install --cask docker
open /Applications/Docker.app # accept GateKeeper, allow permissions, accept Terms of Use

Retrieve Dan Lenski's Python project and build its Docker container:

git clone https://github.com/dlenski/python-vipaccess.git
cd python-vipaccess
docker build . -t python-vipaccess      

Run the docker image invoking python-vipaccess to provision an OAUTH-HOTP pair:

# Run the python-vipaccess Docker image to provision a type SYMC type secret
docker run python-vipaccess provision -p -t SYMC

Optional: test that the OTP secret from the last step is sufficient to generate 6-digit OTP codes:

brew install oath-toolkit
oathtool -b --totp 52HNB4MD77XH7VKA35YFQI5VYWPJZ4UK  # FYI I am not actually using this secret

Now, in Safari, edit the Keychain entry for E*Trade to add a OTP code. Enter Setup Key and paste the secret value.