3 ms·
Google makes using a different TOTP authenticator very difficult. First, I need to register a phone number as 2FA. Only then can I choose an alternate method,
by csdreamer7 5y ago
Google makes using a different TOTP authenticator very difficult.
First, I need to register a phone number as 2FA. Only then can I choose an alternate method, get codes, and have to select Google Authenticator to use my Open Source authenticator, Aegis.
Does not say Google Auth or any TOTP; specifically only says Google Auth. I was worried Aegis would not work until I tried it.
Why not show choices on the sign up screen? Why do I need to register a phone number first? It is very insecure in the USA. Data collection? Hold out from when a phone number was the only real 2FA and a TOTP was under additional options? If the latter, that needs to change if 2FA is going to be mandatory.
- tadfisher 5y agoThis is doubly silly because the Google Authenticator team created the otpauth:// URI scheme which every authenticator application supports. I integrated it in pass-otp, for example.
- foobar33333 5y ago>Why do I need to register a phone number first? It's an anti spam/anti abuse feature. Getting access to new phone numbers that aren't recognized as virtual is pretty hard.