3 ms·
Yeah i stopped using authy the first time a token was automatically seeded this way (may have been another way, but it was automatic and I didn't like it becaus
by avh02 4y ago
Yeah i stopped using authy the first time a token was automatically seeded this way (may have been another way, but it was automatic and I didn't like it because I was also using the seed on my Pebble which i could then no longer do with this method). i prefer manual control over stuff like that and definitely don't want it assuming some magic is okay.
- TedDoesntTalk 4y agoI think you’re being a little paranoid: https://support.authy.com/hc/en-us/articles/360036077534-Authy-Backups-Password-Recovery https://support.authy.com/hc/en-us/articles/360036077534-Aut... “How do you derive encryption keys from a Backup Password? We use the National Institute of Standards and Technology (NIST) recommended algorithm PBKDF2.”
- avh02 4y agoOh no that's fine, I just didn't like the initial seeds for a new 2fa enrollment being magically transferred to the authy app without my control/intervention. See https://authy.com/guides/twilio/ https://authy.com/guides/twilio/ and note that it's not the usual "scan the qr code". The seed is transmitted straight to authy, which, safe or not, takes away control from me to add that same seed elsewhere.