One time secret alternative github. algorithm - (Algorithm) Hashing method.
One time secret alternative github py # Package initialization │ ├── config. Use to securely share sensitive secrets such as API keys, signing secrets, passwords and more with 3rd parties or Yopass generates a unique one click link for the encrypted file or message. While offline, use this value instead of asking the DC ENH: Enigma Virtual Box updated to version 9. It is intended to be simple enough to be audited by someone with a basic understanding of JavaScript and AWS to validate that it is a non-malicious method for GitHub is where people build software. Upon first get request there will be message to proceed toward one time shown content. yopass. credentials secrets one-time one-time-secret secrets-management one-time-password secrets-manager GitHub is where people build software. Who can view secrets? Anyone with a secret link and the corresponding Retriever. credentials secrets one-time one-time-secret secrets-management one-time-password secrets-manager Updated Feb 21 Alternative opensource secret module for ripple. 00 (to create the special all-in-one-file) ENH: PHP 7. credentials secrets one-time one-time-secret secrets-management one-time-password secrets-manager Updated May 21, 2023; Use AKeyless static secrets and dynamic secrets in your GitHub Actions workflows. Evaluating Privnote, $ yopass --help Yopass - Secure sharing for secrets, passwords and files Flags:--api string Yopass API server location (default "https://api. The TOTP secret keys are stored in a normalized format, so this plugin is fully compatible with the built-in OTP function. How Secure secret sharing, end to end encrypted in browser. com developed with Python and Flask - Agniwald/One-Time-Secret This small web app stores a secret text, encrypts it, and will delete it the first time it is viewed. For example: "NY4A5CPJZ46LXZCP" Store the secret key in the database associated with the user account. Yes, work related but with external providers and customers - so not something worth their time setting up the "right" way (for example OpenPGP encryption), sometimes even if they wanted to they Golang learning project - One Time Secret. This image contains the application and its dependencies. You signed in with another tab or window. About Us. Let me know if there's anything missing that would make it work for you. The secret is encrypted with a symmetric 256bit AES encryption in the browser before being sent to the server. More than 100 million people use GitHub to discover, fork, and contribute to over 420 million projects. If you use a one-time link instead, the information persist for a single viewing which means it can't be read by someone else later. I use sysPass among others but only accessible via VPN, so it wouldn't be practical to "share this password" from it. (Source Code) MIT PHP Github Ntfy ⚠ - Push notifications to NTFY when a new release is available on Docker Hub or Github OTS - One-Time-Secret sharing platform with a symmetric 256bit About Us. Features: share a secret that can be read only one time; secure with client-side encryption: the server has no idea what the secrets are; also works without JavaScript but then drops client-side encryption support LABEL org. Not only you get a list of passwords, you also know where to log in - a typical password manager stores everything in one place. com/pglombardo/PasswordPusher. image. 14 Retriever alternatives. There are multiple ways to run OnetimeSecret using Docker. Copies the secret URL to the clipboard. Hi there! I understand that you're looking for alternative options for 2FA on GitHub, since you cannot use SMS or Authenticator 2FA. More than 100 million people use GitHub to discover, fork, and contribute to over 420 million Vanishing Keys is the public implementation of how Authress provides One Time Secrets. Vanishing Keys is the public implementation of how Authress provides One Time Secrets. Our users have written 0 comments and reviews about Retriever, and it has gotten 11 likes. ; 😌 Easy to Set The iOS input suggestion requires React Native 0. Use to securely share sensitive secrets such as API keys, signing secrets, passwords and more with 3rd parties or with your team. Status Not to mention that multimedia files contain several orders of magnitude more data which can also be used to identify the source through various forms of analysis (e. You switched accounts on another tab or window. Free • Open Source. Which is the best alternative to onetimesecret? Based on common mentions it is: Bitwarden/Server, Vaultwarden, Age, PrivateBin, PasswordPusher or Magic-wormhole Two Factor Authentication Java code implementing the Time-based One-time Password Algorithm Code available from the git repository. Right now it is only generating using localhost:4173. github. Paste a password, secret message or private link below. 0 ' Scala SBT. One-Time Secret. If you want to delete secret without reading. Were someone to intercept the email/chat/whatever and view the password before the reciever did, the reciever would more than likely respond with "it tells me the password has already been viewed" at which point you know I'm consious that by allowing the user to set the encryption key, they will most likely use a short phrase - drastically decreasing the time to brute force. credentials secrets one-time one-time-secret secrets-management one-time-password secrets-manager Updated Feb 21 GitHub is where people build software. currentTime - (int) The current time in milliseconds. credentials secrets one-time one-time-secret secrets-management one-time-password secrets-manager Updated Apr 5 , 2024 An application that enables users to share secrets accessible only once, integrating technologies like GitHub, Docker, and a preferred database - one-time-secret-app/README. Keep sensitive info out of your email and chat logs. Ephemera is a one-time secret transfer tool intended to help you in the transition from legacy tools which do not allow secure secret communication (e. Frequently used in Multi-Factor Authentication (MFA) / Two-Factor Authentication (2FA) systems. Secure key management is beyond the scope of this document; for the purposes of an example, though, we'll generate a random key: An application that enables users to share secrets accessible only once, integrating technologies like GitHub, Docker, and a preferred database - GitHub - UQ-eLIPSE/one-time-secret-app: An applicat GitHub is where people build software. keyEncoder: function: Encodes a secret key into a Base32 string before it is sent to the user (in QR Code etc). Secrets can be encrypted using a password provided by the user and then retrieved using a unique key. a temporary password). Easily create, schedule, publish, and manage social media content in one place (alternative to Hootsuite, Buffer, and other social media tools). It uses the official Docker image for Onetime Secret. I've been asked to evaluate a company standard for a one-time secret tool. so. The application generates a link that uses a preconfigured domain and port. Toggle navigation. py # Main application setup with FastAPI │ ├── models. As the Secret URL is accessed, views are counted server side and (if owned by a logged in user), an audit trail is Alice: Ho! so, somebody else read the key, I am encoding with new key and send you again the new one. This is similar to what One Time Secret. This is useful if you want to embed it in a script or use it in a CI/CD pipeline. https://github. One-Time-Secret This is JSON API analog of https://onetimesecret. com Hi, Great App! However, the secrets arent being emailed out, could someone take a look ;) Alfred One-Time Secret. firebase cryptography reactjs onetimesecret tailwindcss. More than 100 million people use GitHub to discover, fork, A one-time secret message link generator built in React with Vite & TailwindCSS. password glpi glpi-plugin one-timesecret Updated May 16, 2024; PHP; Improve this page GitHub is where people build software. Secrets are destructed 💥 once viewed, or after specified expiry We use Keeper Security, they have a built in One Time share URL thing. and its secret key completion Generate the autocompletion script for the specified shell generate Generate one-time password from secret key help Help about any command list List all added accounts and GitHub is where people build software. credentials secrets one-time one-time-secret secrets-management one-time-password secrets-manager Updated Feb 21 A One-Time Secret integration with GLPI. Golang API client for OneTimeSecret. js and Browser - Supports HOTP, nodejs javascript secret-sharing passwords privnote one-time-passwords secrets-management privnote-cli. onetime share You can pipe it: ots is a one-time-secret sharing platform. Contribute to ticgal/one-timesecret development by creating an account on GitHub. One of the most appreciated features provided by this platform is the self-destruction feature which allows the user to send the message. - GitHub Alternate ways; Usage; Examples. Star us on Github. Reload to refresh your session. One-Time Secret is a cloud-based open-source application that facilitates the user by providing a platform for one-time messages and threads for information transfer. firebase cryptography reactjs onetimesecret tailwindcss Updated Jun 22, 2023; A One-Time Secret integration with GLPI. vanish. ; The user now wants to authenticate to the server. Contribute to dismantl/onetimesecret-docker development by creating an account on GitHub. If you can see the secret, you are per definition the first and only one to have accessed this information. It supports the generation and validation of HMAC-Based One-Time Passwords (HOTP) as specified in RFC 4226 and Time-Based One-Time Passwords (TOTP) as specified in RFC 6238. The make it appear again make sure the integration is uninstlled, then go to the Settings -> Devices & Services page on Home Assistant, then click the three-dot-menu on the top righthand corner and select ARCHIVED: This original repository has been archived and is unmaintained. Hi, I'm Delano, the creator of Onetime Secret. Retreiver lets you 🔐 Share end-to-end encrypted secrets with others via a one-time URL. Only that job would have access to the secret and you can also set a rule to only allow deploys to that GitHub is where people build software. Over a decade later, we're facilitating the secure sharing of millions 📧 Built-In Magic Link - Authenticate users with a Click. bastiaanjansen Contribute to jdockerty/onetimesecret-go development by creating an account on GitHub. Reply reply OTS - One Time Secret. OTS- One Time Secret. " WofWca added Retriever as alternative to cryptgeon GitHub repository 201 Stars 18 Forks 6 Open Issues Updated Jan 30, 2024 View on GitHub. Tiny script to generate a onetimesecret link. Contribute to danmanners/one-time-secret development by creating an account on GitHub. js, Deno, Bun and browsers. PrivateBin is a minimalist, open source online pastebin where the server has zero knowledge of pasted data. #One Time Secret. via password reset URLs or key fingerprints). This is a fork of ZeroBin, originally developed by Sébastien Sauvage. # OR, pull from Docker Hub Quick secrets is a small, portable, Ruby web app that allows users to create and share temporary secrets via web links. Here are some best practices: Set Clear Expiration Times: Always set short, appropriate expiration times for your secrets. Updated Jun 22, 2023; Creates a random string containing the defined number of bytes to be used in generating a secret key. It provides a form to display one time passwords. A clone of the very useful One-Time Secret but with a simpler design . For that, he could send the shared secret directly to the server (like a regular password), but a man-in-the-middle attack could capture this, and the attacker could log in with the password. Updated Feb 25, 2023; Go; jkroepke / helm-secrets. One of the Links to passwords expire after a certain number of views and/or time has passed. Generate a disposable one-time JSON API analog of https://onetimesecret. cryptgeon. This is similar to Bitwarden Send but Share end-to-end encrypted secrets with others via a one-time URL. Download the workflow Write better code with AI Security. 1: 2013-12-20: internal code improvements, documentation, 0. A one-time pad is considered perfect secrecy: it's The advantage of using the simple API is that you can create a password and retrieve the link without having to open the web interface. A One-Time Secret integration with GLPI. se")--decrypt string Decrypt secret URL--expiration string Duration after which secret will be deleted [1h, 1d, 1w] (default "1h")--file string Read secret from file instead of stdin--key string Manual encryption/decryption key--one-time A simple self destructing link generator. The exported QR codes from authentication apps can be captured by camera, read from Generate a code for the provided secret and time. 1: Create a secret; View a secret; Protect a secret by password; Send a secret via email; ###TO-DO: Create a php script to safely erase secrets not viewed; ##Installation ###Requeriments HTTPS POST of text that gets encrypted and stored in a database. Use to securely share API Keys, Signing secrets, Passwords, etc. Issue Type: Bug Hi there, My Github Copilot only returns single line suggestions for anything, even the test case: function calculateDaysBetweenDates(begin, end) { From looking at other people's co GitHub is where people build software. Please change the DEV_PORT variable the docker-compose. voice detection). We use that. ; 🔐 Secure - Encrypted Time-Based Codes. algorithm - (Algorithm) Hashing method. Updated Nov 12, 2019; JavaScript; AginSquash / open2fa. Contribute to swissbuechi/one-time-secret development by creating an account on GitHub. Share secrets securely with ease. . credentials secrets one-time one-time-secret secrets-management one-time-password secrets-manager Updated May 21 Hi there I am currently working with colleagues on a small webapp that is based on PHP and a database. The decryption password can alternatively be sent separately. A one-time secret message link generator built in React with Vite & TailwindCSS. Even if someone does obtain either your mnemonic or OTP key, you would have time to move your coins to a new wallet with a brand new seed before anything happens to your coins. The app parse the DB_URL as an URL and use the protocol to identify the database A small and easy-to-use one-time password generator library for Java implementing RFC 4226 (HOTP) and RFC 6238 Generation of secrets; Time-based one-time password (TOTP, RFC 6238) generation based on current implementation ' com. Enter your "secret" word, password in a form, onetime link will be generated. View all. Currently the password is automatically cleared after 1 hour and after 1 view, I would like to have the user be A PowerShell Module for OneTimeSecret. secret - (String) A Base32 String. keyDecoder: A one-time secret is a link that can be viewed only one time. Contribute to chelnak It is also possible to use this module against a private instance of one time secret. Contribute to jdockerty/onetimesecret-go development by creating an or Secrets type, which is struct that contains the expected responses from the API, such as a list of recipients for the secret or it's time-to-live Secrets detection for your GitHub, GitLab and Bitbucket repositories. More than 100 million people use GitHub to discover, fork, and contribute to over 330 million projects. A PowerShell Module for OneTimeSecret. GitHub is where people build software. md at main · UQ-eLIPSE/one-time-secret-app Saved searches Use saved searches to filter your results more quickly This project implements a service for securely storing and sharing one-time secrets. length - (int) The length of the resulting code. Indeed, this may be a useful feature for some password managers. Afterwards an URL containing the ID of the secret and the password is A One-Time Secret integration with GLPI. Sharing should be quick and easy; No I recently made a secure, encrypted one-time secret tool just for fun. If you use a one-time link instead, the information persists for a single viewing which means it can't be read by someone else later. Contribute to luisternou/one-time-secret development by creating an account on GitHub. se")--decrypt string Decrypt secret URL--expiration string Duration after which secret will be deleted [1h, 1d, 1w] (default "1h")--file string Read secret from file instead of stdin Keep sensitive information out of your chat logs and email. <username>: username specified during sign-up at the OneTimeSecret Service, or your server of choice (if defined in the <options>) <password>: Password or API key created for your account <options>: additional api options <url>: server url of a custom server <apiVersion>: API version to use (currently only "v1"). opencontainers. One Time Secret Link is built on Cloudflare's infrastructure, leveraging its security, scalability, and performance benefits. That record has a finite number of views and days. That is why the data is safe. com is doing. interval - (int) Refresh interval to get a new code. We use 1password, and there's a "share" option that lets you create a link to the secret which can only One-Time Secret is a cloud-based open-source application that facilitates the user by providing a platform for one-time messages and threads for information transfer. Set-OTSAuthorizationToken -Username user@mail. github golang github-api security osint secret secrets secrets-management cyint Updated Aug 30, 2023; JavaScript; external credentials secrets one-time one-time-secret secrets-management one-time-password secrets-manager Updated May 21, 2023; While the ephemeral nature is a key feature, we understand the importance of preventing accidental data loss. The technology stack includes: Frontend: Svelte app hosted on Cloudflare Pages; Backend: Cloudflare Workers; Storage: Cloudflare KV; Open Source. Popular alternatives. Contribute to chelnak/OneTimeSecret development by creating an account on GitHub. The one time password codes generated in the authenticator apps only last for a certain time period before they are re-generated, and most implementations of TOTP allow room for codes that have recently expired, or will only "become valid" soon in the future to be accepted as valid, to allow for a small time drift between the server and the authenticator app (discrepancy). credentials secrets one-time one-time-secret secrets-management one-time-password secrets-manager Updated Apr 5 , 2024 These dialogs will only show up the first time you install the integration and only if you do not have the client_id and client_secret configured in your configuration. Shared-Secrets is an application that helps you to simply share one-time secrets over the web. 7. 0: 2011-12-19 you can follow the download link above and unpack in some directory on your sys. One-Time Access Tokens can be generated as needed: Secrets Manager > Applications > Application Name > Devices Tab > Edit > Add Device button - will let you create new Device and generate its One-Time Access Token. - GitHub - NOOBBase/one-time-secret-1: Secure way to share secrets. Yopass is created to reduce the amount of clear text passwords stored in email and chat conversations by encrypting and generating a short lived link which can only be viewed once. Once a secret is requested and decrypted, it is automatically deleted from Lightweight, thread-safe Java/Kotlin TOTP (time-based one-time passwords) and HOTP generator and validator for multi-factor authentication valid for both prover and verifier based on shared secret - atlassian/1time one time secret. On Android, it will be auto filled when you press the copy code button in the notification bar (see above GIF). Secrets are encrypted at rest with a default password. Please find the maintained fork of the original maintainer at yahesh/shared-secrets. Right now it is only generating using localhost:80 Paste the secret link in secret_id field, then enter the secret_key to access the secret. Each record in the database has a TTL (time to live) with a max of 24 hours. Sponsor Star Pull requests A helm plugin that help manage secrets with Git workflow and store them anywhere. The code for One Time Secret Link is publicly available on GitHub. Usage. What started in 2012 as a simple, secure way to share sensitive information has grown beyond our wildest expectations. Its probably a good idea to change this to something more complex GitHub is where people build software. Once a secret is requested and decrypted, it is automatically deleted from one-time-secret-api/ │ ├── onetimesecret/ │ ├── __init__. ##What is OTS? OTS provides a one use only link, its a safe way to share data and ensure that it will be seen only once. firebase cryptography reactjs onetimesecret tailwindcss Updated Jun 22, 2023; GitHub is where people build software. Using Pre-built Images. credentials secrets one-time one-time-secret secrets-management one-time-password secrets-manager Updated Apr 5, 2024; GitHub is where people build software. Afterwards, message will be shown and at the same time deleted from database. This is the reason why One-Time Secret is and always will be text-only: to avoid any and all non-obvious forms of intrusion. xyz Simple clone of the idea from onetimesecret. "SECRET=MYSQL_PASSWORD_FILE,MYSQL_ROOT_PASSWORD_FILE,CERT_EXAMPLE" The environment DIR_SECRET means where your secret will be saved, and the environment SECRET will be split into an array which contains your secret file name. Share a secret link that is available only one time. dx Improvements to developer experience, tooling, code organization, or documentation improvement Issues or pull requests that involve Its purpose is to get rid of phones and be able to authenticate easily. g. Conclusion: On one hand, if the link fails we know the password was read by a stranger, on the other hand, if Bob read the link it will fail for the next reader. 5. I'm happy to help you explore some possible solutions. ; Communicate Clearly: Inform recipients about the urgency of accessing shared secrets. Our primary goal is to name a standard site or tool to send self-destructing notes providing that the host cannot see the contents, and the traffic is encrypted. And finally, you can add a deployment branch for that environment. The default secret is set to CHANGEME in the configuration file. py # MongoDB repository and connection handling │ ├── main. encryption secrets self-hosted passphrase secret-sharing communications golang-application privnote security-tools one-time-secret private-notes Updated Jun 13, 2024; Go; FudanMPL / pMPL Star 15. What started in 2012 as a simple, secure way to share sensitive information has grown beyond our wildest expectations. Generate a disposable one-time use link to share an encrypted secret. More than 100 million people use GitHub to discover, 🔑 One Time Password (OTP) / 2FA for Node. And you can create secrets for that environment. bastiaanjansen:otp-java:2. 8 used in the one single file ENH: The multiOTP timeout (how long the GitHub is where people build software. More than 100 million people use GitHub to discover, fork, Vanishing Keys is the public implementation of how Authress provides One Time Secrets. One-Time Secret Power Automate Custom Connector When you send people passwords and private links via email or chat, there are copies of that information stored in many places. with 3rd parties or with your team. Sign in Current version: 1. When you send people sensitive info like passwords and private links via email or chat, there are copies of that information stored in many places. yml under ots-share-run or ots-share-run-no-db service. As an alternative, you can create an environment on GitHub. Share end-to-end encrypted secrets with others via a one-time URL. description="Onetime Secret is a web application to share sensitive information securely and temporarily. You signed out in another tab or window. If you are extraordinary "smart", you will also store your One-Time Password configuration in your password manager, thus bypassing the very idea of the Multi-Factor Authentication. $ yopass --help Yopass - Secure sharing for secrets, passwords and files Flags:--api string Yopass API server location (default "https://api. rosghub. One way to mitigate the risk of leaked secrets is to adopt a proactive approach to secrets management, including regular secrets rotation and proper storage. Contribute to TheDraca/One-Time-Secret-Quick-URL-Gen development by creating an account on GitHub. (The Write better code with AI Code review. Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". ; 🛡 Bulletproof - Crafted in strict TypeScript with high test coverage. yaml file. That is the main point of this mechanism. - NikGor/one-time-secret GitHub is where people build software. ; Use Burn-After-Reading: Enable this option for critical This is a simple HTTP service for generating one-time secrets similar to onetimesecret. We offer pre-built images on both GitHub Container Registry and Docker Hub. We have set up a workflow where every push to the master branch copies the repository to our t One-time password library for HMAC-based (HOTP) and time-based (TOTP) passwords added automated case fold to secret, 0. If the environment SECRET contains a value starts from "CERT", this container will generate a pair of certificate Otherwise, the whole "secret" and hiding values doesn't make much sense. More than 100 million people use GitHub to discover, fork, Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) (an alternative to Twitter Digits). Developers; Snip. Saved searches Use saved searches to filter your results more quickly GitHub is where people build software. 58+ and works for iOS 12 and above. ##Features ###v0. Manage code changes To actually generate time-based one-time passwords, you'll need a key and a timestamp. TTL longer than 7 days for anonymous user backend Ruby Rack app config Updates to configuration files, environment settings, or build parameters documentation Issues or pull requests related to documentation. The user and server need to agree on a shared secret, which must be negotiated in advance and remains constant over a longer time. isGoogle - (bool) flag to turn off secret padding for Google Auth. path, or clone it as Git submodule to your own directory. Find and fix vulnerabilities You signed in with another tab or window. The first half of 2024 has been our busiest period yet. com, share sensitive secrets like passwords via one-time-usable public link. DB_URL must be a connection string. libraryDependencies += " com. A Slack integration with One Time Secret's API using a serverless API - pchiwan/slackonetimesecret 🔐 Share end-to-end encrypted secrets with others via a one-time URL. Contribute to osufx/secret development by creating an account on GitHub. Over a decade later, we're facilitating the secure sharing of millions of secrets monthly, with use cases we never imagined. py # Configuration and environment variables loading │ ├── database. Github. cli secret-management secret-sharing end-to-end-encryption. Btw dont keep your 2FA app and one-time recovery codes on one device. py # Pydantic models for API requests/responses and database schema If you're interested in alternative r/sysadmin communities during the protests, I would say google guys and google awesome sysadmin and awesome selfhosted github And you can find plenty of good options for one time secrets. ApiVersion provides a list of supported API versions The passphrase can only be used to view the password once, so once the reciever has viewed the password the passphrase becomes useless. com. Code Among the most common ways in which secrets get exposed are embedding the secrets directly in code or leaking them through run-time processes, automation pipelines, and logs. Choose the method that best suits your needs: 1. Contribute to Sugaml/one-time-secret development by creating an account on GitHub. PrivateBin was refactored to allow easier and cleaner extensions and has many Onetime Secret - Docker Compose Configuration (WIP) This is the docker-compose configuration for Onetime Secret. Data is encrypted and decrypted in the browser using 256bit AES in Galois Counter mode. Except this is a standalone PHP application, with solid client-side and server-side encryption. yml under ots-share-run-no-db service to connect to external database. com developed with Python, Flask and Gunicorn Method /generate gets secret and password as POST JSON data and returns generated id. Secure way to share secrets. firebase cryptography reactjs onetimesecret tailwindcss Updated Jun 22, 2023; One Time Password library for Node. Use onetime to share something you know (a secret phrase, a special link, etc) or to generate a secret (e. An Alfred workflow for sharing sensitive information with onetimesecret. This means no sensitive info will linger around if it is not retrieved in a timely fashion. Use generateBase32Secret() to generate a secret key in base-32 format for the user. That means you could have a job to deploy to that environment using that secret. It also can be used as a GUI for the built-in OTP function. ; ⛅ Cloudflare Support - Works with Cloudflare Pages. If you need to access a network which uses VIP Access for two-factor authentication, but can't or don't want to use Symantec's proprietary applications—which are only available for Windows, MacOS, Android, iOS—then this is for you. firebase cryptography reactjs onetimesecret tailwindcss Updated Jun 22, 2023; Note: Keeper does not store One-Time Access Tokens - save or copy the token offline for later use. 2. A random token is generated and a "secret" aka hard to guess URL is made to be shared over chat, email etc. python-vipaccess is a free and open source software (FOSS) implementation of Symantec's VIP Access client (now owned by Broadcom). Online. What is an application? Hi, I'm Delano, the creator of Onetime Secret. This project implements a service for securely storing and sharing one-time secrets. Over a decade later, we're facilitating the secure sharing of millions Dockerized version of One-Time Secret. /secrets/{secret_id}/burn - to delete secret. Live Site: https://secrets. 1. svpvipixcwuxlamduqvqyoqddjafxphqvkanlxftulfcezdclkngytjbxt