Aegis Authenticator – Open-source 2FA for Android • Hacker News Board

Re: Aegis Authenticator – Open-source 2FA for Android

#61

Post by alexbakker » Sat, Jan 16, 2021, 11:17 PM UTC

jdright wrote: post #60

Can this import from Google Authenticator?

One of the authors here. Yes! Aegis can scan the QR codes that Google Authenticator presents in the "Transfer accounts" screen. It's also possible to import directly from Google Authenticator's internal database if you have root access.

Re: Aegis Authenticator – Open-source 2FA for Android

#62

Post by shaicoleman » Sat, Jan 16, 2021, 11:24 PM UTC

I've switched to it recently, it's really great:

* Open source

* Has search functionality

* Has biometric unlock functionality

* Has no external dependencies (SMS/remote accounts)

* Nice design/UX

* Dark mode

* Can import from other apps

* Just works

* Can do an encrypted export

* Encrypted export can be read by other apps, see https://github.com/beemdevelopment/Aegis/blob/master/scripts...

Re: Aegis Authenticator – Open-source 2FA for Android

#63

Post by m-p-3 » Sat, Jan 16, 2021, 11:27 PM UTC

supernova87a wrote: post #13

I don't know about you but does anyone else screenshot (and even print physical copies of, to keep safe) their authenticator barcodes given by websites, in case some day your chosen app dies or your phone(s)/tablets/everything gets lost?

I store my password manager (Bitwarden) TOTP code in my safe in QR code format. I keep all my other TOTPs in my password manager.

My Bitwarden password is long (at least 40 characters long, I didn't count precisely) and never used or reused.

Re: Aegis Authenticator – Open-source 2FA for Android

#64

Post by m-p-3 » Sat, Jan 16, 2021, 11:32 PM UTC

Ayesh wrote: post #24

Sucks that there is no Windows version. Android one looks pretty nice and I like that there are many import/export options

There are some KeePass-compatible password managers on Windows that can generate TOTP codes if that's something you want.

Re: Aegis Authenticator – Open-source 2FA for Android

#65

Post by jdright » Sat, Jan 16, 2021, 11:42 PM UTC

alexbakker wrote: post #61

jdright wrote: post #60

Can this import from Google Authenticator?

One of the authors here. Yes! Aegis can scan the QR codes that Google Authenticator presents in the "Transfer accounts" screen. It's also possible to import directly from Google Authenticator's internal database if you have root access.

Just migrated all devices in my home. Without root access, I had to use another phone to take a picture of the QR and then scan with Aegis. This way it had difficulty understanding QR that had more then 4 entries. Anyway, waiting for the icons support, but for now it is another Google app down! Thanks a lot.

Re: Aegis Authenticator – Open-source 2FA for Android

#66

Post by gruez » Sat, Jan 16, 2021, 11:45 PM UTC

I've been trying to switch away from a closed source authenticator and this ticks most of the boxes. The only thing it's missing is the ability to quickly filter by group. Currently you have to open app -> 3 dot menu -> filter -> select group (4 steps total), whereas the authenticator I'm currently using allows you to side swipe -> select a group (2 steps), or add a shortcut on homescreen that opens the app with the filter enabled (1 step).

Re: Aegis Authenticator – Open-source 2FA for Android

#67

Post by chessmango » Sat, Jan 16, 2021, 11:55 PM UTC

gruez wrote: post #66

I've been trying to switch away from a closed source authenticator and this ticks most of the boxes. The only thing it's missing is the ability to quickly filter by group. Currently you have to open app -> 3 dot menu -> filter -> select group (4 steps total), whereas the authenticator I'm currently using allows you to side swipe -> select a group (2 steps), or add a shortcut on homescreen that opens the app with the…

Can recommend AndOTP in this case, provided using Android. Grab a build off F-Droid - easy tag-hopping with options for single or multiple tag selection. Have very few complaints, and I 2FA anything I can, at work and personally, so tags strictly necessary

Re: Aegis Authenticator – Open-source 2FA for Android

#68

Post by alisausaaaaa » Sun, Jan 17, 2021, 12:32 AM UTC

Wanna have hot-lovin' conversations? You’re on the right way! - https://adultlove.life

Re: Aegis Authenticator – Open-source 2FA for Android

#69

Post by NikolaeVarius » Sun, Jan 17, 2021, 1:22 AM UTC

exabrial wrote: post #40

Sounds awesome! Authy is fricken awful. It requires SMS for "security" entirely defeating the purpose of 2FA. Worse off, some SAASs _require_ Authy specifically. Think about that. That means the security of an enterprise system at your company is completely dependent on whether or not an individual secures their personal cell phone account. Absolutely stupid, avoid Authy like the plague.

> Authy is fricken awful. It requires SMS for "security" entirely defeating the purpose of 2FA

Explain. There is a separate password to defeat traditional SMS attacks.

Re: Aegis Authenticator – Open-source 2FA for Android

#70

Post by gchamonlive » Sun, Jan 17, 2021, 1:25 AM UTC

alexbakker wrote: post #47

ffpip wrote: post #21

Earlier quoted context omitted.

> so I have to use another app to sync the backup to a cloud of my choice You can select Google Drive/Dropbox when backing up the vault. https://github.com/beemdevelopment/Aegis/issues/258#issuecom...

One of the authors here. Unfortunately, Google Drive and Dropbox only partially participate in Android's Storage Access Framework. In Aegis, exporting only requires the creation of a file, so that works with both. Configuring backups on the other hand requires selecting a folder, but most cloud providers don't support that. A notable exception is Nextcloud.

How about cloud paas providers like AWS? The user could generate a IAM access key with permissions to manage a specific bucket and configure Aegis with the key. Aegis would use the cloud Api to upload the backup.

If that is of interest, I could help implement that.