31–40 of 121 posts
I don't know about you but does anyone else screenshot (and even print physical copies of, to keep safe) their authenticator barcodes given by websites, in case some day your chosen app dies or your phone(s)/tablets/everything gets lost?
Earlier quoted context omitted.
Done, migrated 40 accounts to Aegis. As I see, it backs up to the internal storage, so I have to use another app to sync the backup to a cloud of my choice
> so I have to use another app to sync the backup to a cloud of my choice You can select Google Drive/Dropbox when backing up the vault. https://github.com/beemdevelopment/Aegis/issues/258#issuecom...
edit: this is not released yet, I think
Currently using Authy. Any way to migrate my keys in bulk?
If you have root access, yes.[1] Otherwise no, sadly. One of the reasons I moved off Authy before it got worse. There is a workaround using the Authy Desktop app but I have no idea if it works.[2] [1] https://github.com/beemdevelopment/Aegis/pull/107 [2] https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d...
I have a conflict on export of keys for backup. But then you kind of need it in the event you loose the phone (so you don't have to rely on sms or email to recover account access).
Personally I think the best security I have seen is in Keybase or Matrix with the trusted devices concept. I like how keybase allows for one of the devices to be a paper device.
I don't know about you but does anyone else screenshot (and even print physical copies of, to keep safe) their authenticator barcodes given by websites, in case some day your chosen app dies or your phone(s)/tablets/everything gets lost?
That's really what scratch codes are for.
From a user's perspective, what does it have over other 2FA apps such as Google Authenticator or Duo?
I can’t tell from the homepage, but perhaps it supports SHA256? Google Authenticator on Android (but not, weirdly, on iOS) pretends to be fine with SHA256 but then goes ahead and uses SHA1, and thus generates wrong codes.
Earlier quoted context omitted.
That's really what scratch codes are for.
Yes, but not every service offers recovery codes.
Sucks that there is no Windows version. Android one looks pretty nice and I like that there are many import/export options
I don't know about you but does anyone else screenshot (and even print physical copies of, to keep safe) their authenticator barcodes given by websites, in case some day your chosen app dies or your phone(s)/tablets/everything gets lost?
Authy is fricken awful. It requires SMS for "security" entirely defeating the purpose of 2FA. Worse off, some SAASs _require_ Authy specifically.
Think about that. That means the security of an enterprise system at your company is completely dependent on whether or not an individual secures their personal cell phone account. Absolutely stupid, avoid Authy like the plague.