Live data from Hacker News

Ask HN: Recommended two-factor authenticator app for personal use?

news.ycombinator.com

21–30 of 42 posts

Re: Ask HN: Recommended two-factor authenticator app for personal use?

#21
post #5

Even if you don’t use Google, you can use their Google Authenticator app.

I've used Google Authenticatior a few years ago. Back then it didn't support device migration.

There is an export option in the menu, but it does require you to still have your previous device.

Re: Ask HN: Recommended two-factor authenticator app for personal use?

#22
post #6

Bitwarden

I thought that feature was behind a subscription, though?

Yes, but a) it is 10 dollars a year and b) comes with a bunch of other great features.

I personally pay, but if you only use it for that feature, I can see how it is too expensive. If you also use the app, it is a pretty good offer.

Re: Ask HN: Recommended two-factor authenticator app for personal use?

#23

If you use iOS, I can recommend OTP Auth. It's free and also has a great Apple Watch app. https://apps.apple.com/us/app/otp-auth/id659877384

It also optionally syncs with iCloud. If you use that, that’s a huge plus if you use that and lose your phone.

Re: Ask HN: Recommended two-factor authenticator app for personal use?

#25
post #2

I use Microsoft’s Authenticator and so far have had no problems. I also use 1Password’s built in 2FA functionality which is a little redundant but it makes filling in 2FA code on websites and apps very easy.

I started using Microsoft Authenticator for work, since I have several O365 accounts that require it. Ended up really liking it and use it for all of my TOTP now, with Bitwarden as my password manager. Also have a yubikey, for other purposes.

Re: Ask HN: Recommended two-factor authenticator app for personal use?

#26
Authy is a good choice if you want to multiple devices, e.g. mobile and desktop. It is rather easy to add a new device or to make a backup.

Password managers, as 1Password, do offer 2FA. For those password managers that have free versions this is sometimes a paid add-on. Using password manager also for 2FA can be a little bit risky, but you can also use password manager only for storing 2FA or even use two password managers (one for 2FA, other one for passwords).

Re: Ask HN: Recommended two-factor authenticator app for personal use?

#28

Bitwarden

But if you also use bitwarden for your passwords, aren't you making your two-factor authentication a single factor again?

Depends. For someone who's determined enough and has a wrench, most things become single factor.

https://xkcd.com/538/

Re: Ask HN: Recommended two-factor authenticator app for personal use?

#29
RE the alternative question: 2FA is _not_ an alternative to password managers -- it's like seat-belts and brakes on a car, you're going to want both. You need a password manager to keep track of the random password you've set for each of the hundred sites you log into; and you should use 2FA for high-value sites in case the password you used for that site gets stolen (like via malware infestation on your computer, or you're tricked into entering your credentials on a phishing page, etc).

Re: Ask HN: Recommended two-factor authenticator app for personal use?

#30
You mention SIM jacking, but I see other comments here recommending Authy here, which requires a cell phone number and SMS OTP to set it up. Your second edit also says you're going with Authy. That doesn't make sense to me.

With any of these apps, you need to backup the first time setup code (or the QR code) for each site or platform where you're configuring 2FA. That's how you get the ability to set those up in another app if you lose your device.

If you're on iOS, the latest iOS version (iOS 15) has in-built support to generate and populate two factor codes. If you'd like a separate app, I'd recommend OTPAuth if you're on iOS/watchOS/macOS (the Mac app is a paid one, the rest are free and allow iCloud syncing).

Post reply on HN