4 ms·
Why should someone outsource one more important identity thing to Google?
by liveoneggs 3y ago
Why should someone outsource one more important identity thing to Google?
- solardev 3y agoIt doesn't have to be Google Auth, it can be any 2FA app (1password, Bitwarden, Authy, Microsoft Auth), whatever. It's just a safer way to do 2FA than SMS. Google Auth is just one of the earlier popular apps, so it's a common example. It kinda sucks though, cuz if you lose your phone you have to reset all your 2FAs.
- astrange 3y agoGoogle Authenticator is client side. It's not the best 2FA app though; it makes it unreasonably hard to transfer codes.
- lxgr 3y agoIt's the opposite these days – they sync your HMAC secrets to your Google account now unless you opt out: https://security.googleblog.com/2023/04/google-authenticator-now-supports.html https://security.googleblog.com/2023/04/google-authenticator...