Offline Spin-offs / offgrid-totpDocumented state

Offgrid TOTP

Local TOTP generator with manual and local QR import, standalone file and optional PWA wrapper.

01

Problem

Initial situation

Local use under limited browser/resource conditions requires explicit fallbacks and limited approvals.

02

Constraints

Boundary conditions

  • Secrets are ephemeral by default; optional storage is unencrypted in localStorage
  • No hardware-protected vault; accurate device time required
  • QR check symbols verified, no image error correction
  • SHA-512, HOTP and migration QR not implemented
03

Solution

Solution

Local TOTP generator with manual and local QR import, standalone file and optional PWA wrapper.

04

Architecture

Architecture

  • ES5 / SHA-1 and SHA-256 TOTP
  • Local QR processing / no cloud transfer
  • Standalone file://; PWA for suitable origins
05

Result

Result

RFC test vectors documented; no complete cryptographic/security certification. No secrets or account QR codes published. Confirmed by the user on October 29: error-free execution tested and documented on an HTC with custom ROM / Android 4.1 under Firefox. No blanket approval for Android 4 or iOS; exact device/ROM/Firefox versions not specified here.