Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

How is the Blizzard Mobile Authenticator implemented? Does it happen to use OATH-TOTP or something similar?

share|improve this question

1 Answer 1

up vote 2 down vote accepted

There's a Windows client at http://code.google.com/p/winauth/ which was made by reverse-engineering the protocol. They refer to http://www.wowwiki.com/Battle.net_Mobile_Authenticator_Specification as a description of the protocol, but it's rather sketchy.

You probably have to read the source to an authenticator to get a full understanding. There's one written in python at https://github.com/Adys/python-bna that would probably be the easiest to read.

share|improve this answer
The protocol and Python implementation make it pretty straight forward. Definitely not OATH though; damn. Thanks! –  Mike Boers Jun 14 '12 at 20:50

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.