4 ms·
So now your second factor is... the Authy master password?
by hobo_mark 4y ago
So now your second factor is... the Authy master password?
- Freak_NL 4y agoAnd the private key material Authy has in its database.
- throwanem 4y agoWhich is still strongly preferable to getting locked out of everything because Google Authenticator refuses to participate in device backups. Lucky for me I found out about that well before I moved to "2FA wherever possible", but I still had to send some vendors scans of my driver's license to get back into my accounts with them. Maybe they've fixed that since then, but I don't care. I'd rather risk a theoretical flaw in Authy's E2EE than risk getting screwed again, and by now much more thoroughly, by the flaw I know about in Google Authenticator.
- ROARosen 4y agoHa. Happens to be there is a script out there somewhere which allows you to extract the private key of any of your MFA codes from Authy through Chrome DevTools (it's an Electron app) so you can use it in whichever MFA solution you want.