The Infisical TOTP dynamic secret allows you to generate time-based one-time passwords on demand.

Prerequisite

  • Infisical requires either an OTP url or a secret key from a TOTP provider.

Set up Dynamic Secrets with TOTP

1

Open Secret Overview Dashboard

Open the Secret Overview dashboard and select the environment in which you would like to add a dynamic secret.

2

Click on the 'Add Dynamic Secret' button

3

Select TOTP

4

Provide the inputs for dynamic secret parameters

Secret Name
string
required

Name by which you want the secret to be referenced

Configuration Type
string
required

There are two supported configuration types - url and manual.

When url is selected, you can configure the TOTP generator using the OTP URL.

When manual is selected, you can configure the TOTP generator using the secret key along with other configurations like period, number of digits, and algorithm.

URL
string

OTP URL in otpauth:// format used to generate TOTP codes.

Secret Key
string

Base32 encoded secret used to generate TOTP codes.

Period
number

Time interval in seconds between generating new TOTP codes.

Digits
number

Number of digits to generate in each TOTP code.

Algorithm
string

Hash algorithm to use when generating TOTP codes. The supported algorithms are sha1, sha256, and sha512.

5

Click 'Submit'

After submitting the form, you will see a dynamic secret created in the dashboard.

6

Generate dynamic secrets

Once you’ve successfully configured the dynamic secret, you’re ready to generate on-demand TOTPs. To do this, simply click on the ‘Generate’ button which appears when hovering over the dynamic secret item.

Once you click the Generate button, a new secret lease will be generated and the TOTP will be shown to you.

Was this page helpful?