3 ms·
And this is also what makes Authy a terrible 2FA tool no one should use ever. It stores your secrets in plain text on the phone without any secure enclave. If
by lrvick 8y ago
And this is also what makes Authy a terrible 2FA tool no one should use ever.
It stores your secrets in plain text on the phone without any secure enclave. If your backup password is sniffed or there is a flaw in Authy or your mobile OS sandboxing fails you are toast.
- bluesign 8y agoIf your mobile os sandboxing fails, you are toast in any scenario. I think every authenticator app is toast as long as mobile sandbox is comprised.