Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Aegis Authenticator – Open-source 2FA for Android

getaegis.app

Post reply on HN
Print view View original

91–100 of 121 posts

Re: Aegis Authenticator – Open-source 2FA for Android

#91

Post by circularfoyers »

shaicoleman wrote: post #62

I've switched to it recently, it's really great: * Open source * Has search functionality * Has biometric unlock functionality * Has no external dependencies (SMS/remote accounts) * Nice design/UX * Dark mode * Can import from other apps * Just works * Can do an encrypted export * Encrypted export can be read by other apps, see https://github.com/beemdevelopment/Aegis/blob/master/scripts...

I don't see any reason to use it over andOTP, which has all those features and has been around years before Aegis. It even looks suspiciously similar to andOTP, if not heavily inspired by it.

Re: Aegis Authenticator – Open-source 2FA for Android

#92

Post by MayeulC »

hiyer wrote: post #81
MayeulC wrote: post #42

I used to use andOTP, mainly because it was possible to export OTP tokens when upgrading or resetting my phone. Then IIRC I heard that andOTP wasn't that secure/maintained. Or maybe that their backup file encryption wasn't that great. I am not sure about these claims, but I migrated to Aegis , that could nicely import AndOTP tokens. Nowadays, I use it in combination with bitwarden (it supports OTP), which I use for m…

> I migrated to Aegis, that could nicely import AndOTP tokens. Thanks. I use andOTP too and was hoping this point was answered somewhere here :-).

Oh, perhaps I should also mention that Aegis can easily display OTP secrets that can be pasted into Bitwarden.

You can also display Qr codes to easily export a select few to another authenticator app.

Not sure about Aegis -> AndOTP? Aegis can export txt and json, as well as its own encrypted format.

Re: Aegis Authenticator – Open-source 2FA for Android

#93

Post by alexbakker »

gruez wrote: post #66

I've been trying to switch away from a closed source authenticator and this ticks most of the boxes. The only thing it's missing is the ability to quickly filter by group. Currently you have to open app -> 3 dot menu -> filter -> select group (4 steps total), whereas the authenticator I'm currently using allows you to side swipe -> select a group (2 steps), or add a shortcut on homescreen that opens the app with the…

One of the authors here. We've gotten a lot of similar feedback lately. This is something we plan on addressing in a future release by introducing filter chips, either directly on the main view, or one tap away. Hopefully that'll make it a bit easier to quickly filter based on groups.

Re: Aegis Authenticator – Open-source 2FA for Android

#94

Post by aorth »

technion wrote: post #78
petespeed wrote: post #14

Anyone knows if and how to use this instead of Microsoft authenticator?

When you setup Microsoft Authenticator, it defaults to a QR code that will be invalid to standard TOTP apps. However, that's because it assumes you want to use the push notification of the app. If you click a button like "key without notify", it will give you a different QR code which is fully standard and works with common apps like this.

Wow, that is a great tip! I have been avoiding setting up a TOTP with Microsoft for months because I didn't want to install their app and I didn't know you could click "without notifications" to get a standard code. Super annoying that they insist on texting me every freaking time I log into email or Teams. Now I can use Aegis, phew!

Re: Aegis Authenticator – Open-source 2FA for Android

#95

Post by chromakode »

m-p-3 wrote: post #87
mattrick wrote: post #83

Earlier quoted context omitted.

Doesn't it kinda defeat the point of storing TOTP codes in your password manager?

If it's secured by TOTP and a unique and secure password, it's not the weakest link.

This reduces the attack scope from two devices to one. If your computer or web browser is compromised then both your TOTP secrets and password secrets are in one basket. Storing TOTP on a separate device can make it significantly harder to compromise your accounts.

Re: Aegis Authenticator – Open-source 2FA for Android

#98

Post by shaicoleman »

circularfoyers wrote: post #91
shaicoleman wrote: post #62

I've switched to it recently, it's really great: * Open source * Has search functionality * Has biometric unlock functionality * Has no external dependencies (SMS/remote accounts) * Nice design/UX * Dark mode * Can import from other apps * Just works * Can do an encrypted export * Encrypted export can be read by other apps, see https://github.com/beemdevelopment/Aegis/blob/master/scripts...

I don't see any reason to use it over andOTP, which has all those features and has been around years before Aegis. It even looks suspiciously similar to andOTP, if not heavily inspired by it.

* Aegis has a nicer design

* Aegis has an extensive import functionality, andOTP does not seems to have it

* andOTP relocks every time you switch apps, which can be annoying if you need multiple codes when you login to multiple services. In Aegis that behaviour is configurable

* andOTP makes you choose between biometric encryption and password, Aegis supports both at the same time

* andOTP supports tags, Aegis does not

Due to the import functionality, it's easy enough to give it a try, and see if you like it yourself.

Re: Aegis Authenticator – Open-source 2FA for Android

#99

Post by alexbakker »

antpls wrote: post #97

I have no printer at home. Does anyone know how to backup all those QRcodes on paper ?

If you write down the secrets and the other parameters on paper, that would suffice as a backup as well. I'd recommend using Aegis' encrypted backup though.

Re: Aegis Authenticator – Open-source 2FA for Android

#100

Post by PascalW »

alexbakker wrote: post #56
tarruda wrote: post #25

Earlier quoted context omitted.

Aegis has an option to export an encrypted backup of the database. I export one every time I add a new code to the app.

One of the authors here. Recent versions of Aegis also come with an automatic backup feature, so that an export is created at a location of your choosing automatically every time a change is made to your entry list. Might be a little more convenient than doing manual exports every time.

Thanks for pointing this out! I've been using Aegis for quite a while and didn't know this.
Post reply on HN