3 ms·
I use Authy: https://www.authy.com/ https://www.authy.com/ Now I'm wondering are there similar security concerns here as with Google Authenticator?
by ptha 9y ago
I use Authy: https://www.authy.com/ https://www.authy.com/
Now I'm wondering are there similar security concerns here as with Google Authenticator?
- tptacek 9y agoYes. But those concerns don't really matter. Just use whatever TOTP application you're most comfortable with, and, because even experts can be phished, try to use the security key as much as you can.
- lrvick 9y agoYou can only use U2F for what, github and google? I am a big fan, but the 30 other services I need to access to do my job use TOTP. We need all the help we can get on that until TOTP is finally phased out.
- lrvick 9y agoAuthy has the same core issues because the problem is they have to store the secret key in plain text somewhere for TOTP to work. Worse: it is closed source and does not allow itself to be easily audited so we don't even get to know for sure where the key is stored and how beyond what the docs promise. Security is hard enough when everything is open source. Closing foundational security tools so only a select few biased individuals can deem them secure on a deadline is never a good plan.