4 ms·
If we're talking OTP/TOTP -- it's all the same. Even if a provider instructs you to use a specific app, e.g. Google or Authy, you can simply scan the QR code wi
by ezekg 2y ago
If we're talking OTP/TOTP -- it's all the same. Even if a provider instructs you to use a specific app, e.g. Google or Authy, you can simply scan the QR code with whatever authenticator app you're using. All the QR code does is encode a URI containing the secret and issuer.
- RockRobotRock 2y agoI don’t think that’s what they’re saying. Authy supports TOTP but they also have a proprietary format.
- roughly 2y agoAuthy supports TOTP, but also has its own proprietary TOTP-esque format that a bunch of sites & companies use (Twitch and my bank, among them) that can't be copied into another site. (Yes, it's bad, no, it shouldn't exist, no, I don't know why they don't just <...>, etc.)
- 77pt77 2y agoIs it standardized?
- kuon 2y agoI use keepassxc for twitch so it should be something fairly standard, I don't remember using special settings. Anyway, I wanted to share this gist which might be of some help to migrate away from authy: https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d958c93 https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d...
- Wevah 2y agoTwitch supports regular TOTP now, thank goodness.
- dethmetaljeff 2y agoAuthy (the app) does support generic TOTP which as you mentioned, so do hundreds of others. Unfortunately, the authy app (and some well meaning but not so well versed companies) opt to use Authy's proprietary OTP which isnt compatible with other clients.
- omneity 2y agoThis is simply not true. Just today an app asked me to use Microsoft Authenticator, and scanning the QR code with Google Auth and Authy didn’t work, earning me an “Invalid QR code” error and forcing me to install the app from MS.
- ezekg 2y agoI don't think there's a formal spec for the otpauth URI yet [0], even if there is a spec by Google [1], so this may just come down to MS adding some incompatibility to force usage of their authenticator, or the app using some proprietary authentication scheme that is not otpauth. There's nothing complicated about otpauth provisioning URIs i.e. what's encoded into the QR code. [0]: https://shkspr.mobi/blog/2022/05/why-is-there-no-formal-specification-for-otpauth-urls/ https://shkspr.mobi/blog/2022/05/why-is-there-no-formal-spec... [1]: https://github.com/google/google-authenticator/wiki/Key-Uri-Format https://github.com/google/google-authenticator/wiki/Key-Uri-...
- nickburns 2y agoYou assume that because you were not able to overcome whatever error/s you encountered with Google Auth and Authy, that you were being forced to use MS Authenticator.
- omneity 2y agoPretty uncharitable interpretation on your end. I am a developer and went to the extent of verifying the content of the QR code and the optional URL for manually adding it. No OTP code in there. Try to be nicer next time.
- nickburns 2y agoI truly did not mean to come off as rude. The 'content of the QR code' would've revealed the actual seed and so would corroborate your assumption if you did, in fact, verify as much. I merey stated a troubleshooting fact. No offense intended.