Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Aegis Authenticator – Secure 2FA App for Android

getaegis.app

Post reply on HN
Print view View original

91–100 of 143 posts

Re: Aegis Authenticator – Secure 2FA App for Android

#91

Post by virtualritz »

rsync wrote: post #52
virtualritz wrote: post #8

The killer feature for me is a way to quickly access tokens in my (cloud-side, encrypted) vault from a desktop (or web) app in case of emergency. It's not clear to me if Aegis allows this somehow? The other day I broke my phone. I was traveling and needed to do some 2FA level changes to a GH repo asap. I didn't even know there was an Authy desktop app until then. It saved my ass, literally.

"I didn't even know there was an Authy desktop app until then. It saved my ass, literally." That's a really unexpected outcome - can you provide any details ?

> [...] can you provide any details ?

I installed Authy desktop, logged in and it retrieved my tokens form the cloud. Not anything else to it.

Re: Aegis Authenticator – Secure 2FA App for Android

#92

Post by virtualritz »

arcanemachiner wrote: post #87
virtualritz wrote: post #8

The killer feature for me is a way to quickly access tokens in my (cloud-side, encrypted) vault from a desktop (or web) app in case of emergency. It's not clear to me if Aegis allows this somehow? The other day I broke my phone. I was traveling and needed to do some 2FA level changes to a GH repo asap. I didn't even know there was an Authy desktop app until then. It saved my ass, literally.

You can export it to file whenever you add a new key. Then, use SyncThing to sync the copy to a remote location. The exported file can be encrypted when you make it.

Yeah, that's a UX problem.

I need to do that every time and remember.

From my experience, you loose access when the last backup you made and synced was made before the key you need now was added.

I.e. this doesn't work in practice.

Re: Aegis Authenticator – Secure 2FA App for Android

#93

Post by psychlops »

pgalvin wrote: post #77
openplatypus wrote: post #66

Earlier quoted context omitted.

The only downside is limited space on Yubikey. I am currently carrying 2 tokens :(

Up to 32, for those reading who (like me) didn’t know about this limitation. https://support.yubico.com/hc/en-us/articles/4404456942738-F...

Good luck finding 32 places that accept Yubikey.

Re: Aegis Authenticator – Secure 2FA App for Android

#94

Post by jorams »

virtualritz wrote: post #92
arcanemachiner wrote: post #87

Earlier quoted context omitted.

You can export it to file whenever you add a new key. Then, use SyncThing to sync the copy to a remote location. The exported file can be encrypted when you make it.

Yeah, that's a UX problem. I need to do that every time and remember. From my experience, you loose access when the last backup you made and synced was made before the key you need now was added. I.e. this doesn't work in practice.

If you enable automatic backups in the Aegis settings it will create a backup after every change. If you set the output directory to a location synced by Syncthing, there's nothing to remember.

Re: Aegis Authenticator – Secure 2FA App for Android

#95

Post by stavros »

psychlops wrote: post #93
pgalvin wrote: post #77

Earlier quoted context omitted.

Up to 32, for those reading who (like me) didn’t know about this limitation. https://support.yubico.com/hc/en-us/articles/4404456942738-F...

Good luck finding 32 places that accept Yubikey.

They don't have to accept Yubikey, they have to accept TOTP. Which ~everything does.

Re: Aegis Authenticator – Secure 2FA App for Android

#96

Post by bede »

voidee wrote: post #45

FYI: For iOS users looking for alternatives to Google Authenticator or Authy, I highly recommend the open source Raivo. https://raivo-otp.com/ Recently moved all of my TOTPs to it. Encrypted iCloud sync and local backup if desired.

Thanks for this, I'm currently using both Duo to Microsoft authenticator, and the lack of firm reassurance about the backup mechanisms in each of these makes me uneasy. I'd frankly prefer a vault with a model similar to BitWarden's, where I can export my private keys.

Re: Aegis Authenticator – Secure 2FA App for Android

#97

Post by commoner »

virtualritz wrote: post #8

The killer feature for me is a way to quickly access tokens in my (cloud-side, encrypted) vault from a desktop (or web) app in case of emergency. It's not clear to me if Aegis allows this somehow? The other day I broke my phone. I was traveling and needed to do some 2FA level changes to a GH repo asap. I didn't even know there was an Authy desktop app until then. It saved my ass, literally.

Aegis has two automatic encrypted backup options.

The first lets you back up your data to any folder on your device or to any storage provider (e.g. Nextcloud and other cloud storage providers) linked to your device. Turn this on at Settings > Backups > Automatically back up the vault. The storage provider's app needs to be installed. Changes are saved to the backup location automatically.

The second uses the OS's built-in backup feature. For Android devices with Google Play Services, the backup is saved on Google Drive. Some other Android distributions such as LineageOS use Seedvault, which can save the backup to any WebDAV provider or an external USB drive. This option is at Settings > Backups > Participate in Android's backup system.

Either or both options can be used in Aegis.

Re: Aegis Authenticator – Secure 2FA App for Android

#98

Post by hnews_account_1 »

virtualritz wrote: post #8

The killer feature for me is a way to quickly access tokens in my (cloud-side, encrypted) vault from a desktop (or web) app in case of emergency. It's not clear to me if Aegis allows this somehow? The other day I broke my phone. I was traveling and needed to do some 2FA level changes to a GH repo asap. I didn't even know there was an Authy desktop app until then. It saved my ass, literally.

I can’t believe this is a tech forum. The answer is simple. 2FA has a url. All you have to do is store the url in your password manager. Then you can import it into any new app at a moment’s notice (as long as you have access to the vault) and generate a 2fa code.

In fact, KeePassium on iOS works on this concept. I use it as my primary otp url storage app and then put limited stuff into aegis on my android tablet for anything I may need there. If a keepass based app with an otp generator (like KeePassium) existed for android, I wouldn’t even need that.

Re: Aegis Authenticator – Secure 2FA App for Android

#99

Post by ajyey »

voidee wrote: post #45

FYI: For iOS users looking for alternatives to Google Authenticator or Authy, I highly recommend the open source Raivo. https://raivo-otp.com/ Recently moved all of my TOTPs to it. Encrypted iCloud sync and local backup if desired.

Love raivo. Wish there was an automated backup solution though

Re: Aegis Authenticator – Secure 2FA App for Android

#100

Post by remram »

rsync wrote: post #52
virtualritz wrote: post #8

The killer feature for me is a way to quickly access tokens in my (cloud-side, encrypted) vault from a desktop (or web) app in case of emergency. It's not clear to me if Aegis allows this somehow? The other day I broke my phone. I was traveling and needed to do some 2FA level changes to a GH repo asap. I didn't even know there was an Authy desktop app until then. It saved my ass, literally.

"I didn't even know there was an Authy desktop app until then. It saved my ass, literally." That's a really unexpected outcome - can you provide any details ?

https://authy.com/download/
Post reply on HN