3 ms·
I use Authy as well. Best part is it backups your stuff.
by k8sToGo 4y ago
I use Authy as well. Best part is it backups your stuff.
- Maxburn 4y agoThat's the feature that got me into Authy. The other feature being it wasn't a google product.
- Avamander 4y agoAre those backups E2EE? Also to be totally honest, each device should have their own TOTP key and while backups are fine*, key sharing isn't.
- stoplying1 4y agoNo. They aren't. This thread is seriously upsetting to read. So many people clearly haven't even remotely begun to think about what they're doing or the implications thereof.
- bjord 4y agoeverything I've read suggests that they are, in fact, E2EE of course, they're not open source, so I'm not really going to bat for them here, but am I missing something? https://authy.com/blog/how-the-authy-two-factor-backups-work/ https://authy.com/blog/how-the-authy-two-factor-backups-work... https://www.ghacks.net/2022/08/10/twilio-the-company-behind-authy-suffered-a-data-breach/ https://www.ghacks.net/2022/08/10/twilio-the-company-behind-... etc.
- stoplying1 4y agoAnother user here pointed out that Authy uses a user provided password to encrypt the 2fa secrets on the server. That's definitely more secure than I had said, that's my mistake. (I still have my reservations, but that's getting too pedantic to matter here)
- jabroni_salad 4y agoKey sharing isnt fine but how many web services will let me enroll multiple totp tokens simultaneously? I havent encountered any, personally. yall designed this reality, now you have to live in it.