4 ms·
Ask HN: Recommended 2FA Service?
With many services requiring the move to enable 2FA, the latest one being Github, perhaps it's a good idea to have a recommended 2FA service thread.
Here's my experience with 2FA so far:
Microsoft Authenticator: Used to log in to work account. iPhone reset -> cannot access the account anymore. Was on phone for 30 minutes with IT department and they were not happy.
What are your recommended 2FA apps?
- dotcoma 3y agoFor iOS, Tofu is simple and works very well. https://www.tofuauth.com/ https://www.tofuauth.com/
- smukherjee19 3y agoEven though looks iOS-only, I'll maybe give it a spin. Thanks much!
- josephcsible 3y agoI assume you mean TOTP apps in particular. Anyway, KeePassXC and FreeOTP are both good for that.
- smukherjee19 3y agoAh, I should have been more specific, yeah. I'll check out KeePassXC and FreeOTP, thank you!
- rawgabbit 3y agoI currently use the Salesforce one because when I upgrade my phone restoring the Authenticator on the new device actually works. If there is a better one I am all ears. https://help.salesforce.com/s/articleView?id=sf.salesforce_authenticator_restore_from_backup.htm&language=en_us&type=5 https://help.salesforce.com/s/articleView?id=sf.salesforce_a...
- smukherjee19 3y agoThis is my first time hearing Salesforce has an authenticator app. Very interesting! I especially like the fact that restoring actually works for you. I'll check it out, thank you!
- t312227 3y agoi'm a big fan of hardware token - connected via usb/nfc! especially because there is no need for a mobile device and they are fairly cheap. and: because they are cheap, i'm using at least 2 per account/service where such keys are supported. if i lose the one on my (physical) key-ring, i always have a working replacement at home ... :) just my 0.02€
- smukherjee19 3y agoVery nice! I hadn't thought of a hardware token, but that does sound very alluring! Do you have any particular hardware ones you can recommend? :)
- t312227 3y agohello, idk ... there are lots of companies which offer them ... it depends on your use-case. in my experience: for simple account-security - eg. github, google, microsoft, etc. - even older ones work great. for other purposes you have to look at the feature-list of specific tokens, if they support the necessary security-protocol for your use-case. personally i have various older & newer models of the companies yubikey - 4 & 5 - and gotrust - idem :) cheers t.