4 ms·
I used to use andOTP, mainly because it was possible to export OTP tokens when upgrading or resetting my phone. Then IIRC I heard that andOTP wasn't that secur
by MayeulC 6y ago
I used to use andOTP, mainly because it was possible to export OTP tokens when upgrading or resetting my phone.
Then IIRC I heard that andOTP wasn't that secure/maintained. Or maybe that their backup file encryption wasn't that great. I am not sure about these claims, but I migrated to Aegis, that could nicely import AndOTP tokens.
Nowadays, I use it in combination with bitwarden (it supports OTP), which I use for my less important accounts. Bitwarden (self-hosted with bitwarden-rs) allows me to generate those without my phone. I still keep every token in Aegis as well.
AndOTP features I miss with Aegis:
- Icon library for common websites using OTP
- Maybe Steam OTP support? I never used it though, since it would more or less lock me out of trading, without the app, so I use e-mail.
- deleted 6y ago[deleted]
- alexbakker 6y agoOne of the authors here. > Icon library for common websites using OTP Someone from the community is maintaining an icon pack for Aegis: https://github.com/aegis-icons/aegis-icons https://github.com/aegis-icons/aegis-icons. We're currently working on making icon packs easier to use in Aegis, see: https://github.com/beemdevelopment/Aegis/issues/509 https://github.com/beemdevelopment/Aegis/issues/509. > Maybe Steam OTP support Steam is supported, actually! But like you said, you'd still need the Steam app if you're doing trading.
- MayeulC 6y agoHey there, thanks for Aegis, it is my main OTP vault for important suff. Thank you and your sibling comment. I'm glad this is being worked on! Discovery is also important IMO, so a one-tap install of the most widely used icon pack would be nice to have too :)
- alexbakker 6y agoThanks for your support! That's a fair point. We'll see what the feedback is like when we release initial support for icons packs and decide whether to include a pack out of the box after that.
- ignitionmonkey 6y agoIcon packs are coming. [1] Steam accounts can be imported if you have root access, or you can try [2]. IIRC Steam codes are almost standard except they use a different encoding because... Valve likes to roll their own stuff (?). I agree that trading makes only having codes a bit less useful. They could've used the same codes to confirm trades instead of an entirely separate interface. [1] https://github.com/beemdevelopment/Aegis/issues/509 https://github.com/beemdevelopment/Aegis/issues/509 [2] https://github.com/beemdevelopment/Aegis/wiki/Adding-Steam-to-Aegis-from-Steam-Desktop-Authenticator https://github.com/beemdevelopment/Aegis/wiki/Adding-Steam-t...
- MayeulC 6y agoThanks for pointing this out. Yeah, steam rolling their own stuff is a bit troublesome at ties, but I think they were among the first to use TOTP tokens, IIRC ? There was a story here the other day on how they roll their own password encryption over HTTPS for logging in... It's a shame they don't use standard authentication mechanisms, though. And I should clarify: my yubikey is my main 2FA token, though support for U2F/Webauthn is a bit limited.
- hiyer 6y ago> I migrated to Aegis, that could nicely import AndOTP tokens. Thanks. I use andOTP too and was hoping this point was answered somewhere here :-).
- MayeulC 6y agoOh, perhaps I should also mention that Aegis can easily display OTP secrets that can be pasted into Bitwarden. You can also display Qr codes to easily export a select few to another authenticator app. Not sure about Aegis -> AndOTP? Aegis can export txt and json, as well as its own encrypted format.
- iFreilicht 6y agoIt works together with icon packs you installed as an app. I use Whicons, it has lovely monochrome icons for most sites I use.