remove spaces from OTP secrets
1 vote
I'd like to ask for a small improvement: a lot of OTP codes when given in text form instead of QR codes are presented with spaces like 1234 5678 ABCD etc.. (Googe does it..)
Although spaces are allowed as secrets I have never seen them used as such. They are almost always for the user to help him read the code. But when you copy and paste them this way, you get the wrong OTP out of the secret. So could you just remove them when entering?
All Comments (5)
Hello,
Can you let me know what version of RDM you're currently using? I tested on our latest internal build and you're not allowed to save an OTP key with spaces, at the moment it shows an error message saying the key is invalid. I think it would be more user-friendly to trim these spaces instead rather than having the user manually remove them, so I will open a ticket for this.
Regards,
Hubert Mireault
2025.3.30.0 64-bit (PreJIT) - just now I saved an OTP secret with spaces (and checked, that it creates the wrong OTP)
I did further tests and you're correct, I will add this information to our ticket as well as it seems some of the checks are wrong. It looks like something like "abcd1234" works while "abcd 1234" fails, but both "abcd1234abcd1234" and "abcd 1234 abcd 1234" can be entered. In all cases, the solution to trim all spaces should fix these inconsistencies.
Regards,
Hubert Mireault
Hello,
I've made some changes to trim spaces in the OTP key, they will be available starting with our non-beta release of 2026.1 which is planned this March.
This should normalize the behavior whether the key is base32 or base64, and whether it has or doesn't have spaces. The change was made in the Username/password entry, in the OTP entry, in the password list entry, and in the OTP section of session entries (like RDP, for example). I believe this should cover all cases, but if I missed something, let me know and I'll address it as soon as I can.
Regards,
Hubert Mireault
Hello,
Thank you for being so patient!
I'm pleased to inform you that a new version of RDM (2026.1.9.0) has been released, including the requested feature.
Latest Version: Download RDM
Please let us know if this works or if you encounter any issues.
Best regards,
Maxim Robert