andcli

andcli is a command-line interface for managing two-factor authentication (2FA) tokens using encrypted backups exported from popular authenticator applications. The tool supports encrypted vault formats from andOTP, Aegis, 2fas, Stratum/Authenticator Pro, KeePass (kdbx v2), and ProtonPass, processing only TOTP entries while keeping all data in memory without persisting to disk.

The tool provides both an interactive terminal user interface and direct query functionality. Users can search for entries with /, navigate with keyboard shortcuts, view tokens by pressing Enter, and copy tokens to the system clipboard with c. The TUI includes features like toggling username visibility and supports theming through hexadecimal color configuration.

andcli handles cross-platform clipboard integration automatically, detecting available tools like xclip, xsel, or wl-copy on Linux, pbcopy on macOS, and clip.exe on Windows. For non-interactive use, the --query flag enables direct vault queries that return results in the format <Issuer> <Token> <ValidSecs>. The tool also supports reading passwords from stdin with --passwd-stdin, making it suitable for automation workflows.

Installation

# via Go
go install github.com/tjblackheart/andcli/v2/cmd/andcli@latest