Ugh. I used this for redundancy. In case I lost my phone I wasn't locked out of everything.
End of Life for Twilio Authy Desktop App
11–20 of 180 posts
Re: End of Life for Twilio Authy Desktop App
#12How do folks use two factor auth for 1password logins? It feels wrong to me to use 1password as the second factor for 1password itself. My last remaining authy second factors are for primary email and 1password. All other second factors are in 1password.
I use a YubiKey.
Re: End of Life for Twilio Authy Desktop App
#13They intentionally make it really hard to migrate your data off their app under the premise of "security". Now, they are EOL'ing desktop apps, which are extremely convenient to use, despite the terrible UX. https://support.authy.com/hc/en-us/articles/1260805179070-Ex... The process for exporting is doable, but requires fairly deep technical knowledge and it isn't 100% clean. In order to do so, you need that desktop a…
Important point out of that reddit Bitwarden thread:
If you migrate to another app and then delete your authy account, you risk having 2FA removed for some integrated accounts if they're set up to directly use the Authy backend. Twitch in some cases was pointed out.
Re: End of Life for Twilio Authy Desktop App
#14They intentionally make it really hard to migrate your data off their app under the premise of "security". Now, they are EOL'ing desktop apps, which are extremely convenient to use, despite the terrible UX. https://support.authy.com/hc/en-us/articles/1260805179070-Ex... The process for exporting is doable, but requires fairly deep technical knowledge and it isn't 100% clean. In order to do so, you need that desktop a…
And they try to lock you in to their own ecosystem. If you use sendgrid, it requires an authy specific 2fa code that can only be generated in their app.
Yeah. I have always wondered what they gain by doing this.
Re: End of Life for Twilio Authy Desktop App
#15They intentionally make it really hard to migrate your data off their app under the premise of "security". Now, they are EOL'ing desktop apps, which are extremely convenient to use, despite the terrible UX. https://support.authy.com/hc/en-us/articles/1260805179070-Ex... The process for exporting is doable, but requires fairly deep technical knowledge and it isn't 100% clean. In order to do so, you need that desktop a…
I use Authy. I've read a few comments about how migrating away is difficult. What do you use instead? I also use bitwarden, but not sure how I feel about passwords and totp being in the same app.
Aegis & KeepassXC. KeepassXC could do it all alone and seperate TOTPs under a seperate database secured to a different password if you please.
Re: End of Life for Twilio Authy Desktop App
#16How do folks use two factor auth for 1password logins? It feels wrong to me to use 1password as the second factor for 1password itself. My last remaining authy second factors are for primary email and 1password. All other second factors are in 1password.
Two ways:
- a Yubikey - a sparingly used email account with no 2FA, just a very long password
2FA through the sort-of-secret email account lets me get back into Bitwarden (and thus everything else) even if my house burns down and I lose access to all of my yubikeys. And auth on a device that doesn't easily support yubikeys, like older iPhones.
2FA is very useful, but highly overrated. If you have a sufficiently long and complex memorized password (and the email platform actually lets you create one that's properly long, 40+ characters), it's unlikely that you'll have any problems unless you accidentally share the password somewhere.
Of course I feel like all my my precautions are moot when my bank and CC company force SMS 2FA. But I haven't found any with superior security schemes anwyway.
Re: End of Life for Twilio Authy Desktop App
#17I migrated to 2FS as I wanted to keep my MFA secrets separate from my BitWarden passwords. It does require some technical knowledge but the how to was thorough and is found here https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d...
Best to get it done quickly before they prevent you from downloading the older version that had the debug console
Re: End of Life for Twilio Authy Desktop App
#18More previous discussion: https://news.ycombinator.com/item?id=38921618
Is sad because that one got posted too early and probably won't reach the top of the feed and fewer people will see it. .. and mods will probably delete this one.
That one was just another discussion a month ago, might have some extra tips for alternatives etc.
This one is fine, official, and was first for today.
Re: End of Life for Twilio Authy Desktop App
#19Yeah, super-ugh. Every 2FA vendor wants to lock you in. I was able to export secrets from GAuthenticator on a rooted phone with sqlite, it looks like that is still possible on Authy too. Another vote for rooting your phone.
Re: End of Life for Twilio Authy Desktop App
#20Ugh. I used this for redundancy. In case I lost my phone I wasn't locked out of everything.
Worth noting that you can install the Authy iPad app on ARM Macs (unsure about Intel, but I'm skeptical)
but seriously, what a terrible app, another great reason to get off that platform