---
type: source
title: "2FA with TOTP: Setting up a Secondary Device (PC/Notebook)"
tags: [2fa, totp, keepassxc, security, redundancy]
related: [2-factor-authentication, keepassxc, ums, totp]
created: 2026-07-01
updated: 2026-07-01
sources: ["output/rz_uni_greifswald_de_support_dokumentation_anleitungen_2fa_mit_totp_zweitgeraet_.md"]
---

# 2FA with TOTP: Setting up a Secondary Device (PC/Notebook)

This source provides a detailed procedural guide for university members to configure a secondary device (specifically a PC or Notebook) for Two-Factor Authentication (2FA) using Time-based One-Time Passwords (TOTP). The primary goal is to ensure redundancy, preventing account lockout if the primary device (typically a smartphone) is lost or unavailable.

## Key Instructions

### KeePassXC Database Setup
The guide recommends using **KeePassXC** as the TOTP generator on the secondary device.
- **Storage Recommendation:** If the user works exclusively within the university network, it is recommended to store the KeePassXC database on the central file server (H: drive). This eliminates the need for separate backups.
- **Backup Responsibility:** Users who do not store the database on the H: drive are solely responsible for backing up their database file.

### Security Hardening
A specific security step is mandated:
- **Clipboard Clearing:** Users are instructed to go to `Tools` $\rightarrow$ `Settings` $\rightarrow$ `Security` and set the "**Clear clipboard**" value to **30 seconds** to minimize the window of exposure for sensitive data.

### TOTP Configuration Workflow
1. **UMS Access:** The user logs into the [[ums]] (Account Management) and navigates to `My Account` $\rightarrow$ `Two-Factor Authentication`.
2. **Secret Retrieval:** Instead of scanning a QR code, the guide directs users to "**Variant B: Manual Setup**" to copy the **TOTP Secret** (alphanumeric key).
3. **KeePassXC Integration:** The secret is pasted (Ctrl+V) into the "Secret Key" field of a new TOTP entry in KeePassXC. Manual copy-pasting is preferred over QR scanning on PCs to avoid errors such as trailing spaces.

## Support Channels
For issues related to this setup, the URZ provides:
- A ticket system via [[groupware]].
- A support hotline at extension **1420**.
