46 ms·
This is a really cool product! I'm so glad someone is finally trying to solve this problem. Not having control of your secrets is a big problem. It is why I co
by unqueued 4y ago
This is a really cool product! I'm so glad someone is finally trying to solve this problem.
Not having control of your secrets is a big problem. It is why I continue to use TOTP for some things.
Maybe lean into the practical problem this solves and how it empowers the user?
I am going to suggest this to people. But I feel like I'd have to explain to them what it does, and why it is cool. I remember a few years ago when Keybase took off a few years ago. I think Keybase did a pretty good job of presenting itself to it's audience.
I know plenty of people who understand what a Yubikey is, but might not understand what this app is.
Personally, I love that I could keep backups of my TOTP secret keys in encrypted qr codes on paper in a safe, if I wanted to.
I think it is deeper than just the technical part of it. I think people really like anchoring their accounts to something that they can "see".
It would be really easy to let you import and export your secrets to physical media. And there are some interesting options with chaining your secrets to other hardware tokens (that you are in control of).
Of course it gets very tricky when suggesting anything security related. I don't want to tell people that they shouldn't use hardware tokens. But I think that relying on hardware tokens can be really inaccessible, which can itself be make a system less secure.
Best of luck!