Export to 2Fas - Instructions

[SensehacK]

I followed your guide and I have unencrypted tokens from your script. Thank you.

What I don't understand here with this note below is, how would I find the so called compatible script which converts the decrypted.json to my preferred 2FAs iOS app.

Please note that this JSON file is not in a standard format that you can import to other authenticator apps, however some people have made scripts to convert the decrypted_tokens.json file into a format recognizable by other authenticator apps. I'll leave a link to some of these below.

twofas/2fas-ios#76

Or should I just try importing directly into the app.

Things I tried

• Running this compatibility script found from 2FAs authy thread migration

Saving the js script and running it as

node export_oss_two_factor.js

with error

const items = appManager.getModel().map((i) => {
                ^
ReferenceError: appManager is not defined

I think AppManager is dependent on the desktop authy - remote_debugging session approach hence it doesn't get the reference of App Manager

Your Import / Export approach

What tool/app did you use to import your decrpyted.json formatted TOTPs.
I was leaning towards 2Fas but if that's not supported, I would rather go for something which is supported and not support Twilio overall.

[SensehacK]

I try to import the decrypted.json file on my iPhone app 2FAs with Raivo OTP option and I get wrong format error.

[SensehacK]

I'm gonna try bitwarden export / convert approach shared in this python script.

Edit: I was able to export / import into Bitwarden but turns out TOTP is restricted to premium members. Welp will have to switch to Vaultwarden

[SensehacK]

I have utilized "AI" to write a script which converts your json file to Vaultwarden / Bitwarden format and then converts to Ravio OTP format

I didn't fully write it like a guide more so like sharing my frustration, ranting while achieving what I set out to achieve.

My published Gist
Hope it helps anyone trying to Migrate off from Authy to 2Fas using Proxy MiTM approach.

[AhmadMorningstar]

Guys i just converted all of my tokens to 2FA from Authy following the exact methods, one thing they didn't teach yet, the converting into 2fa formart, personally i used the QR mode method converted everything to otpauth:// and then generated QR codes and scanned it on 2FA here is the code

import json

def convert_to_aegis_uris(json_data):
    """Converts Authy-like JSON to Aegis-compatible otpauth:// URIs."""

    try:
        data = json.loads(json_data)
        tokens = data.get("decrypted_authenticator_tokens", [])
        uris = []

        for token in tokens:
            name = token.get("name")
            issuer = token.get("issuer")
            secret = token.get("decrypted_seed")
            digits = token.get("digits", 6)  # Default to 6 digits

            if name and secret:
                uri = f"otpauth://totp/{name.replace(':', '').replace(' ', '')}?secret={secret}&digits={digits}&algorithm=SHA1&period=30"
                if issuer:
                    uri += f"&issuer={issuer.replace(' ', '')}"
                uris.append(uri)

        return uris

    except json.JSONDecodeError:
        return ["Error: Invalid JSON input."]
    except Exception as e:
        return [f"An unexpected error occured: {e}"]

def main():
    try:
        with open("data.json", "r") as f:
            json_data = f.read()
            uris = convert_to_aegis_uris(json_data)
            for uri in uris:
                print(uri)
    except FileNotFoundError:
        print("Error: data.json not found. Please make a copy of your orignal Decrypted.json file and rename it to data.json must be in same directory as this script and run it again")

if __name__ == "__main__":
    main()

save this code as script.py

make a copy of your decrypted.json and rename the copied one to data.json then run this with python script.py

after you run it, it will give you list of otpauth://totp/ values simply copy paste it into Notepad save it somewhere save 2fatokens.txt then archive with password of your choice optional but more secure, then run the otpauth://totp/ on ur app copy paste, i perosnally did the QR converted it into QR code and scanned it on my devices

if anyone needs help i be happy to help :)

[SensehacK]

@AhmadMorningstar

after you run it, it will give you list of otpauth://totp/ values simply copy paste it into Notepad save it somewhere save 2fatokens.txt then archive with password of your choice optional but more secure, then run the otpauth://totp/ on ur app copy paste, i perosnally did the QR converted it into QR code and scanned it on my devices

Curious why did you opt in for QR codes instead of just import wizard in 2Fas?

[AhmadMorningstar]

Great question, here is the answer. i simply wanted the QR Codes myself i have separate Hard drive, i store my tokens in there and passwords and everything, so it was more of a personal preference, and knowing we all humans someone probably gonna use it like me 👍🏻

[cognitiaclaeves]

I was trying to get this working tonight, and none of the above worked for me. For the first approach, converting from 'Ravio OTP format', I was able to generate the file, `ravio_otps_third_try.json', but when I tried to import it into 2FAS I got a long error message that seemed to mean that it was unable to parse the json file. ( Had no issues with jq ., so the json seemed to be valid enough. )

This may be obvious to everyone else, as no one has said anything, but that approach requires running both scripts, the one to convert decrypted_tokens.json to vaultwarden_import.json, and then the one to convert that file to raivo_otps_third_try.json. The 2FAS app also mentions a 'ZIP archive' -- it says to extract it, but I was confused because I was trying to point to the file that I copied into dropbox, and it didn't work -- only a local .json file will be found. So I ended up doubting everything I was doing.

Ultimately, I was only able to get so far as an error "Importing 2FA tokens from Raivo app - could not read any tokens. Try to select a different file. ... with error details: Fatal exception: kotlinx.serialization.json.internal.JsonDecodingException. ... and then a long stack trace which made no sense to me. I thought maybe it was an encoding issue, but file -I raivo_otps_third_try.json showed 'raivo_otps_third_try.json: application/json; charset=us-ascii', so unless it was converted when I downloaded the file from dropbox to android, that shouldn't be the issue.

I also tried to figure out if the format had changed, but it looks like that format hasn't changed in the 2FAS code since it was committed 2 years ago.

@SensehacK , any idea what I might be doing wrong? Does any of this happen to sound familiar?

So I gave up on this approach, and then tried the next one (the QR codes method.) @AhmadMorningstar , what does this mean?

run the otpauth://totp/ on ur app copy paste, i perosnally did the QR converted it into QR code and scanned it on my devices

... are you suggesting a manual process of some sort? I have 98 of these codes to convert. I was trying to avoid a manual process. But I couldn't make sense of the quote above.

[AhmadMorningstar]

I was trying to get this working tonight, and none of the above worked for me. For the first approach, converting from 'Ravio OTP format', I was able to generate the file, `ravio_otps_third_try.json', but when I tried to import it into 2FAS I got a long error message that seemed to mean that it was unable to parse the json file. ( Had no issues with jq ., so the json seemed to be valid enough. )

This may be obvious to everyone else, as no one has said anything, but that approach requires running both scripts, the one to convert decrypted_tokens.json to vaultwarden_import.json, and then the one to convert that file to raivo_otps_third_try.json. The 2FAS app also mentions a 'ZIP archive' -- it says to extract it, but I was confused because I was trying to point to the file that I copied into dropbox, and it didn't work -- only a local .json file will be found. So I ended up doubting everything I was doing.

Ultimately, I was only able to get so far as an error "Importing 2FA tokens from Raivo app - could not read any tokens. Try to select a different file. ... with error details: Fatal exception: kotlinx.serialization.json.internal.JsonDecodingException. ... and then a long stack trace which made no sense to me. I thought maybe it was an encoding issue, but file -I raivo_otps_third_try.json showed 'raivo_otps_third_try.json: application/json; charset=us-ascii', so unless it was converted when I downloaded the file from dropbox to android, that shouldn't be the issue.

I also tried to figure out if the format had changed, but it looks like that format hasn't changed in the 2FAS code since it was committed 2 years ago.

@SensehacK , any idea what I might be doing wrong? Does any of this happen to sound familiar?

So I gave up on this approach, and then tried the next one (the QR codes method.) @AhmadMorningstar , what does this mean?

run the otpauth://totp/ on ur app copy paste, i perosnally did the QR converted it into QR code and scanned it on my devices

... are you suggesting a manual process of some sort? I have 98 of these codes to convert. I was trying to avoid a manual process. But I couldn't make sense of the quote above.

Hey friend, I have read your message and it looks like you are stuck at the importing phase, I suggest you try doing the QR Code then try importing 1 of ur 98 accounts to see if the .json is valid in everything.

[cognitiaclaeves]

I finally figured out that I could just import the list of QR codes as a 'plain text' file into Aegis, but I noticed that data that was in the decrypted_tokens.json file was missing when importing into Aegis.

I'd spent enough time trying to get the solutions that were out there working, so I just wrote my own. I started by exporting a single entry from Aegis into an unencrypted json file to capture the exported structure, built around that.

Along the way, I decided that I really liked Aegis, so I stopped there. But since the Aegis file is essentially an unencrypted Aegis export file, it should also be possible to import into 2Fas.

For anyone wishing to use my script, here's the link . I noticed some inconsistencies in my data that I tried to fix with my script, so it tries a little harder than just a blunt-force conversion from one format to another, which others may appreciate. I also try to map to groups, which was not available (AFAIK) in authy, but even though the file looks OK, that part of the import failed. I kept it in because it's not doing any harm, and someone may have a need and a drive to debug it in the future.

I intend to submit this as a PR, just in case.

[crossRT]

hi guys. i'm here with the same purpose, migrating from authy to 2FAS.
i managed to retrieve decrypted_tokens.json by following the guide in this repo, but the part of converting to 2FAS compatible format was a bit confusing for me.
at the end i use raivo format, as 2FAS supports importing from this format.

thus i created a cli tool to do the conversion easier.
anyone who needs it may download the binary or source code from following:
https://github.com/crossRT/escape-authy

[tmueller78]

Hi everybody,

especially anybody who's not using 2FAS. I just switched to Proton Authenticator as it fits all my needs. I don't remember what I found missing with 2FAS, but something bothered me. Proton has all I need, also a desktop app.
The simplest way to import the tokens is to just import them manually, you don't even need the QR Code from above:

• add a new code in your new 2FA app
• then usually the photo option opens, but there should be a button somewhere that says "Enter manually" or the like
• that's where you enter the salt from the file of decrypted tokes
• Done

It depends on how many codes you have, but I started with the ones that were most important to me and ended up doing like 50% in one go as it's pretty fast with copy & paste anyway.