3 ms·

Is it possible to DIY these things? Or a FOSS app on my phone?

wkat4242 3y ago
Google authenticator, yes. I use andOTP which is great. I think it's no longer being updated but there's many alternatives too. For passkeys I haven't seen a full open source implementation that actually works. Some parties like bitwarden promise it but aren't finished afaik.
- 5e92cb50239222b 3y ago
  JFYI, Aegis is a decent and maintained FOSS replacement for AndOTP and can import backups from the latter (in case it ever stops working).
  - wkat4242 3y ago
    Oh yeah that's the one I was thinking of. However it lacks the ability to GPG export using OpenKeyChain which is why I went back to AndOTP.
projektfu 3y ago
F-Droid has a number of apps. KeePassDX (also on F-Droid) also supports TOTP, as does KeePass 2.0 on desktop, if you're comfortable keeping it with your password manager. PyOTP contains plenty of information about how to implement an authenticator app. https://pyauth.github.io/pyotp/ https://pyauth.github.io/pyotp/
- mort96 3y ago
  I would avoid anything KeePass, simply because it seems like an absolute mess of forks. How do you know which KeePass* to use? How do you know the one you pick won't be superceeded by another fork in 2 weeks? Why does the world need KeePass, KeePassX, KeePassXC, KeePassDX and KeePass 2?
  - projektfu 3y ago
    The original, KeePass 2, is quite good. The prior version is only for the old database format. The nice thing about it is you can automate sync in many ways, and it has plug-ins that do lots. Every other tool uses KeePass 2 databases. I used KeePassXC but it didn't sync like I wanted using syncthing. Other synch stories probably work better, like Dropbox. Kee is the browser extension I use and it's pretty good. They also have a sync service you can buy, but it's free to use with KeePass 2. I liked it better than the extension that's compatible with KeePassXC. KeePassDX is pretty great. It's working well with my setup, especially using Brave as I avoid Chrome. Incidentally, I think recent Chrome updates have complicated things for password managers on Android but alternative browsers work great. I use it with a longer timeout to lock the database than the default. I think KeePassX is superceded by KeePassXC. So, if you ignore most of the other forks, you don't need much analysis paralysis, and everything works well. For iOS, it's hard to find FLOS solutions but there are paid apps that are supposed to work well to integrate with KeePass 2 databases.
5e92cb50239222b 3y ago
https://lwn.net/Articles/925870 https://lwn.net/Articles/925870

Google authenticator, yes. I use andOTP which is great. I think it's no longer being updated but there's many alternatives too. For passkeys I haven't seen a full open source implementation that actually works. Some parties like bitwarden promise it but aren't finished afaik.

5e92cb50239222b 3y ago
JFYI, Aegis is a decent and maintained FOSS replacement for AndOTP and can import backups from the latter (in case it ever stops working).
- wkat4242 3y ago
  Oh yeah that's the one I was thinking of. However it lacks the ability to GPG export using OpenKeyChain which is why I went back to AndOTP.

projektfu 3y ago

F-Droid has a number of apps. KeePassDX (also on F-Droid) also supports TOTP, as does KeePass 2.0 on desktop, if you're comfortable keeping it with your password manager. PyOTP contains plenty of information about how to implement an authenticator app. https://pyauth.github.io/pyotp/ https://pyauth.github.io/pyotp/

mort96 3y ago
I would avoid anything KeePass, simply because it seems like an absolute mess of forks. How do you know which KeePass* to use? How do you know the one you pick won't be superceeded by another fork in 2 weeks? Why does the world need KeePass, KeePassX, KeePassXC, KeePassDX and KeePass 2?
- projektfu 3y ago
  The original, KeePass 2, is quite good. The prior version is only for the old database format. The nice thing about it is you can automate sync in many ways, and it has plug-ins that do lots. Every other tool uses KeePass 2 databases. I used KeePassXC but it didn't sync like I wanted using syncthing. Other synch stories probably work better, like Dropbox. Kee is the browser extension I use and it's pretty good. They also have a sync service you can buy, but it's free to use with KeePass 2. I liked it better than the extension that's compatible with KeePassXC. KeePassDX is pretty great. It's working well with my setup, especially using Brave as I avoid Chrome. Incidentally, I think recent Chrome updates have complicated things for password managers on Android but alternative browsers work great. I use it with a longer timeout to lock the database than the default. I think KeePassX is superceded by KeePassXC. So, if you ignore most of the other forks, you don't need much analysis paralysis, and everything works well. For iOS, it's hard to find FLOS solutions but there are paid apps that are supposed to work well to integrate with KeePass 2 databases.

5e92cb50239222b 3y ago

https://lwn.net/Articles/925870 https://lwn.net/Articles/925870