Two-factor authentication

Two-factor authentication is required to use COPAL. If you cannot or do not want to install an app on your cell phone, you can alternatively download KeepassXC to your computer free of charge. You can then use KeepassXC to retrieve one-time passwords. Time-based one-time passwords (TOTP) are a popular choice for two-factor authentication methods. These codes are usually six digits long and change every 30 seconds. Follow the instructions:

Translated with DeepL.com (free version)

1. You can download the program from the following link.
2. Click on Download for Windows.
3. Select the desired browser.
4. Click on Download file.
5. Once the download is complete, the message Download complete appears.
6. Next, accept the terms of use.
7. You will be asked "Do you want to make the changes" Click Yes.
8. Then click on Finish.
9. You can search for KeePassXC in the search bar.
10. Create a database by adding a database name and a description and then click Next.

Creating the first database

To be able to use KeePassXC, you must first create a database in which the data for generating one-time passwords is stored.

To create a database, carry out the following steps:

1. Open your KeePassXC application. Click on the Create new database button (A):

2. The database creation wizard is displayed. Enter the desired database name and a short description (optional):

3. Click on Next. The Encryption settings screen is displayed, we do not recommend making any changes other than increasing or decreasing the decryption time using the slider. If you set the Decryption time slider to higher values, this means that the database will have a higher level of protection, but the time to open the database will increase.

4. Click on the Next button. The Database login information screen is displayed, enter the desired database password. We recommend using a long, random password.

(A) Open the password generator
(B) Switch the password visibility

Keep this password for your database in a safe place. Either memorize it
or write it down somewhere. If you lose the database password, you will no longer be able to unlock your database. This means that one-time passwords cannot be retrieved.

5. Click on Done. You will be asked to select a storage location for the database file. You can save your database wherever you want, it is fully encrypted at all times and prevents unauthorized access.

Adding TOTP to an entry

Time-triggered one-time passwords (TOTP) are a popular choice for two-factor authentication methods. These codes are usually six digits long and change every 30 seconds. They are derived from a common secret value and the current time. Once set up, KeePassXC can calculate TOTP codes like any other authenticator app, such as Google Authenticator. The codes can be used with copy/paste, browser extension and auto-type.

Info: Your computer time must be synchronized with an internet time source to generate valid TOTP codes, read more here.

To add TOTP to a database entry, you must first retrieve the secret string from the website or application you are authenticating with. Often this secret is provided with a QR code and can be copied and pasted below. Example:

Then right-click on the desired entry (1), select TOTP → Set up TOTP... (2) and the setup dialog is displayed. In this dialog box, insert the secret code from the website (3), set up all custom settings (rare) (4) and then press OK to save the settings.

After an entry has been configured with TOTP, you will see a clock symbol in the line of this entry and have the option of displaying the current code in the preview window. In addition, you can navigate to the TOTP menu of the entry to display the code in a separate window. You can also display the secret and configuration as a QR code for export to a mobile device. TOTP codes can be entered into forms with the browser extension, with Auto-Type via the placeholder or via menu options in the Auto-Type selection dialog {TOTP}.

.