3 ms·
Why not use an open TOTP app like AndOTP. I use it all the time for sites that claim to require Google Authenticator, it works, and its easy to backup the secre
by jkepler 7y ago
Why not use an open TOTP app like AndOTP. I use it all the time for sites that claim to require Google Authenticator, it works, and its easy to backup the secrets as plain text or encrypted with a password. I keep it current on my primary phone and a cheap offline backup, in addition to backing up the encrypted secrets file.
- balladeer 7y agoI use Authy on iPhone and Mac. I am looking for an OSS replacement but would not want to setup everything from scratch after I change device reinstall the app like Google Authenticator.
- sneak 7y agoBitwarden does a decent job of storing and syncing TOTP codes. Make sure you always use a long password with Bitwarden though, to avoid a known and unpatched issue with their password-based key derivation.
- balladeer 7y agoOh, didn’t know BitWarden did it. That’s my password manager :)
- AaronFriel 7y agoWhat issue is that?
- sneak 7y agoCVE-2019-19766 https://github.com/bitwarden/server/issues/589 https://github.com/bitwarden/server/issues/589
- __david__ 7y agohttps://freeotp.github.io/ https://freeotp.github.io/ iPhone backups back up its data correctly—my codes survive new phone restores where they do not with Google Authenticator.
- samatman 7y agoThanks for sharing this link. I've wanted to get off Google Authenticator for awhile now, mostly because of the backup-restore problem, also a general trend of limiting my involvement with the company.