Two Factor Authentication on LINUX with KeePassXC

I had to set up a "2FA" (Two Factor Authentication) or "TOTP" (Timedbased One-Time Password) tool for my github account. I use github on my LINUX 6.8.0-85 Ubuntu 24.04.3 desktop computer. Github now forces their users to use 2FA, with a delay of 45 days. They do not recommend any tool, so I had to search for a LINUX desktop app that provides 2FA (TOTP).

First I installed gnome-authenticator 3.32.2, but this did not work, it could not scan the github QR-code and it gave me no way to manually enter the "setup key" contained in the QR-code (that github offers as alternative for scanning). Error message was "AccessDenied ... SelectArea is not allowed". I searched for solutions and found I had to install gstreamer1.0-gtk4, but this did not work, I found no PPA repository for it, moreover I had an installed version gstreamer1.0-gtk3. Thus I uninstalled gnome-authenticator again.

Next I found an "askubuntu" page that recommeded KeePassXC, and this installation worked fine via commandline "sudo apt install keepassxc". The graphical user-interface can be launched afterwards via "keepassxc".

Here are some screenshots of what I did then in that tool. I must say that I am completely new to 2FA and do not know at all how this works and what you have to do for it. I just followed the instructions of the "askubuntu" page:

• Create a new KeePassXC database - the GUI tool prompts you to do this, no problem
• Create a new "Entry" with username and password, here I used my github username and password, it did not require any password standards, or maybe my password was good enough
• Select the "Entry" and go to menu "Entries" - "TOTP" - "Set up TOTP", here I entered the "setup key" from github
• In the context-menu of the selected "Entry" I chose "TOTP" - "Copy TOTP" and entered the result on the github page
• github then labeled my 2FA authentication as "Configured" - was that all?

Creating the database is easy, the tool guides you through this and stores the database as a file of your choice at end. Now here are the screenshots of most of the things that must follow.

Here I already created my user "Entry". The screenshot shows the context menu that leads to "New Entry".

Here is the UI where you create the "New Entry". You need to enter your username and password for that. I also entered the URL of my github project.

This is how the app looks when the "Entry" is created.

The menu to set up TOTP.

Here I entered the "setup key" from github as "Secret Key".

Here is the context menu on the selected "Entry" to copy a generated TOTP.

This is how my github account "Password and authentication" page looked after I entered the generated TOTP in the github input field. I don't know yet what will follow, I guess that I will have to open KeePassXC and unlock the database any time I push something to github. Future will teach me how to do:-)

One more evening gone for LINUX! But I don't give up trusting in open-source software, it's simply the better concept.