Kubikey OTP CLI script

kubikey_otp_cli_script.md

A Yubikey, the commandline, and easily generating and copying a One-Time Password

1. Install ykman via homebrew on the Mac.

brew install ykman

2. Create bash/zsh function somewhere in your shell rc files

function otp() {
  code=$(ykman oath accounts code <ACCOUNT_NAME_HERE> -s)
  echo $code | tr -d '\n' | pbcopy
  echo $code
}

3. Call otp whenever you need a OTP. In my case ykman asks me to touch my Yubikey and then provides the one-time code and uses pbcopy to place it in my clipboard right away.

References:

• https://github.com/Yubico/yubikey-manager
• https://www.yubico.com/products/yubikey-5-overview/

Improvements

• Add the account name as an arg on the function
• Add account-specific aliases