4 ms·
Very cool. I already started moving all my 2FA stuff out of Authy but guess it needs to be hastened now.
by pram 4y ago
Very cool. I already started moving all my 2FA stuff out of Authy but guess it needs to be hastened now.
- mfer 4y agoWhat alternative are you using?
- Axsuul 4y agoBitwarden
- grogenaut 4y agoIs there an easy way to import from authy to bw? Or do I have to do one at a time.
- Axsuul 4y agoSorry I'm not sure.
- brewdad 4y agoThe officially supported method is to login to each 2FA account and delete the old 2FA and generate a new one that you make sure to record separately. Authy really locks you in. There are some unsupported methods a Google search away. I have had luck with this one in the past but haven't used in over a year, so can't vouch for it still working. https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d958c93 https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d...
- mfer 4y agoI don't really like the idea of TOTP and passwords in the same place. If it gets compromised someone has both your password and TOTP code.
- Axsuul 4y agoYep I agree so I use 1Password only for passwords and Bitwarden only for TOTP.
- brewdad 4y agoI use Bitwarden for passwords only. I use Authy for the TOTP, although I should use something else. I backup my TOTP seeds in KeepassXC. I also have an offline backup of my Bitwarden vault that is in a separate KeePassXC vault. I agree that I don't like the idea of one vault holding both bits of info.
- toolz 4y agoI use https://github.com/tadfisher/pass-otp https://github.com/tadfisher/pass-otp with pass, which has a FOSS client for desktop and smartphone (at least for andriod, no idea for ios)
- zikduruqe 4y agoIt's built in to passforios https://github.com/mssun/passforios https://github.com/mssun/passforios
- widerporst 4y agoI migrated to Aegis a few months ago and would recommend it. Exporting the configuration was a bit tricky, but I found a guide on GitHub: https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d958c93 https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d...
- toomuchtodo 4y agoPasskeys if the site supports them as a secure authenticator for 2FA/MFA (should pop up in your device if you try to setup a secure hardware authenticator on iphones and android) or TOTPs stored securely somewhere that isn't vendor locked.
- stalfosknight 4y agoiCloud Keychain
- bwb 4y agohow does this impact Authy?
- Axsuul 4y agoTwilio owns Authy but regardless it doesn't. Authy is mostly used client-side with a server-side backup option.
- bwb 4y agoah gotcha, i didn't realize that
- ceejayoz 4y agoAuthy is owned by Twilio.
- deleted 4y ago[deleted]
- MBCook 4y agoTwilio owns Authy. I guess they’re assuming future issues there or with syncing.
- AdmiralAsshat 4y agoAuthy appears to be up, but I guess if it were down, the only issue would be trying to setup a new device and have it sync over the 2FA codes? My understanding is after that initial sync, the TOTP it displays should all work offline.
- btown 4y agoIMO it's good practice to not one's vital 2FA codes held hostage on a service where one's accounts or IP address can be flagged for spam or abusive behavior by automated systems. (This also applies to Google Authenticator, for what it's worth!) Especially in a world where customer service teams are being trimmed wherever possible! I use 1Password - its UI leaves some things to be desired, and it's not cheap, but it has zero incentive to cancel the account of any paying customer!
- nanidin 4y agoGoogle Authenticator is completely offline isn't it? How are accounts / 2FA material at risk of lockout by using Google Authenticator?
- jonny_eh 4y agoIt is, and because of that people regularly lose their vault when switching phones and forgetting to transfer the data.
- deleted 4y ago[deleted]
- theshrike79 4y agoI switched out of Google Authenticator when they updated the app and all my 2FA just went away. They did fix it with another update, but that was a seriously un-fun few days. Luckily I was just logged in to my AWS account so I could disable the 2FA.
- wonderwonder 4y agoI had no idea authy was owned by twilio. Well I know what I'm doing this weekend