4 ms·
Sounds awesome! Authy is fricken awful. It requires SMS for "security" entirely defeating the purpose of 2FA. Worse off, some SAASs _require_ Authy specificall
by exabrial 6y ago
Sounds awesome!
Authy is fricken awful. It requires SMS for "security" entirely defeating the purpose of 2FA. Worse off, some SAASs _require_ Authy specifically.
Think about that. That means the security of an enterprise system at your company is completely dependent on whether or not an individual secures their personal cell phone account. Absolutely stupid, avoid Authy like the plague.
- phreack 6y agoAnecdotally, I've seen a few places that instead of mentioning the protocol just say 'download G Auth' or 'download Authy', and so far all of those worked with Aegis when I tried.
- tobib 6y agoI've been using Authy for a long time and have never come across SMS for security. When would that be triggered?
- MeinBlutIstBlau 6y agoI think it's a point of recovery for your authy account that they're talking about.
- tobib 6y agoGotcha, thanks.
- NikolaeVarius 6y ago> Authy is fricken awful. It requires SMS for "security" entirely defeating the purpose of 2FA Explain. There is a separate password to defeat traditional SMS attacks.
- mynameisvlad 6y agoI believe it uses it for account recovery if you don't have a device with it installed anymore.
- PascLeRasc 6y agoAuthy's trying to make an open standard proprietary. I don't understand why you have to sign up for it with your phone number, or how they've gotten websites like Twitch to offer Authy-exclusive 2FA. In any case I was able to phish myself out of my old phone's Authy account really easily. It's a really bad thing to happen for regular consumers.
- stoolpigeon 6y agoI use Authy for a few reasons. One is the ability to sync and use it across multiple devices. This is really convenient. But the killer is the desktop app. I've had a number of instances where someone I was helping could not get the time of their phone and computer close enough to properly generate codes. Running the Authy app on the machine meant the time matched perfectly and they were finally able to log in. It's not perfect but has some killer features.
- nikolay 6y agoAuthy is a disaster. It damaged my data and I got locked out from many services. At some point the app's generate token is not accepted - I've never had such issues with Microsoft Authenticator or 1Password's 2FA.