3 ms·
The accounts data is saved in an encrypted file. Didn't implement any master password etc because I do not see a need. It's an OTP generator. A hacker would fir
by yashg 3y ago
The accounts data is saved in an encrypted file. Didn't implement any master password etc because I do not see a need. It's an OTP generator. A hacker would first need to know your main login and password and the have access to your computer in order to generate the OTP. Not different than someone having access to your mobile and accessing Google Authenticator. Even Google Authenticator doesn't have any primary password. It can be implemented easily though because the file is already being encrypted. All I need to do is ask the suer to provide the password instead of using a hardcoded key.
- atmanactive 3y agoFreeOTP+ on android does have "android hello" integration. In other words, I can hook it up to my fingerprint, same like my bank apps. Always remember: security is like onion skin and works best in layers. The more layers we have - the better. That's because not everyone's use case is the same and not all hacking attempts are the same. Here's a simple example: if I'm using a portable browser that already has all of my passwords saved, and I'm using your app in portable mode, then, a hacker can have all of my keys just by getting my files, even from a backup. So, as always, striking a balance between convenience and security is a delicate matter, and every little bit of that onion skin matters. Thanks.
- yashg 3y agoYup even Authy mobile app has fingerprint integration. Thanks for your feedback.