I sent them a support request venting. Will this work? Unlikely, but it takes less than a minute once you move through their automated help flow clicking "no not helpful"
End of Life for Twilio Authy Desktop App
131–140 of 180 posts
Re: End of Life for Twilio Authy Desktop App
#132This was literally the only reason to use Authy.
I feel stupid because I’ve been recommending people use Authy for the past year “because it has a desktop and mobile app.”
Yeah its super convenient. I do keep an old backup phone around just in case and occasionally turn it on to sync, but also have the desktop app.
Re: End of Life for Twilio Authy Desktop App
#133Earlier quoted context omitted.
I can imagine a scenario where it needs dependency updates, engineers bring this up, bean counters say “well this doesn’t make us money, spend time on things that make us money instead” until eventually the bean counters say “okay we are no longer doing this, shut it down”
More likely they want to get mobile data from desktop users. Probably with a plan to monetize it somehow later.
That’s even more Occam’s, let’s go with that.
Re: End of Life for Twilio Authy Desktop App
#134For me, the desktop app always sucked (but it was still more convenient that going to my phone). The TOTP would often get completely out of sync unless I backed out of an app's section and went back in, and then waiting for the TOTP to flip.
Yeah its not sexy, but it does work and on Linux too!
Re: End of Life for Twilio Authy Desktop App
#135I regret immensely that I ever endorsed or recommended Authy.
My experience witnessing the regression and functional decline of this app over the years has utterly wrecked my opinion of Twilio. Although I still have a couple of operational Twilio integrations, I no longer have any desire to use any of their products or services ever again.
Re: End of Life for Twilio Authy Desktop App
#136They intentionally make it really hard to migrate your data off their app under the premise of "security". Now, they are EOL'ing desktop apps, which are extremely convenient to use, despite the terrible UX. https://support.authy.com/hc/en-us/articles/1260805179070-Ex... The process for exporting is doable, but requires fairly deep technical knowledge and it isn't 100% clean. In order to do so, you need that desktop a…
I use Authy. I've read a few comments about how migrating away is difficult. What do you use instead? I also use bitwarden, but not sure how I feel about passwords and totp being in the same app.
I had the same problem and didn't want to keep all of my eggs in the same basket, plus I lost faith in these backup apps after Google Auth lost user codes at some point.
I decided to create a private backup which I control and so I built a client-side web app that encrypts QR codes (like 2FA codes). It was inspired by a similar CLI based project I saw here on HN. I still use Authy (for now) but now I have encrypted images that I can decrypt and rescan easily. And since they're just images I saved them in various places and even printed out copies should I lose my phone or Authy access.
To 'migrate' my codes out of Authy I just went through each site and regenerated the codes (plus encrypted them). It's annoying that they force you to do this but doesn't take too long.
I'm still polishing it up but it works well and I would love some feedback if there's anyone who finds it useful - https://encrypt-qr-codes.netlify.app/
Re: End of Life for Twilio Authy Desktop App
#137Earlier quoted context omitted.
I agree, seems short-sighted - they could have even just started charging a bit for it to keep it alive if necessary. No surprise though, after a fantastic start, twilio has turned into a sh*t company, unfortunately - I was a very early adaptor of many of their tools and services, and 1 by 1, they have all gone downhill. They should have sold the company while it still had a decent reputation, at this rate there will…
I would have been happy to pay something to have Authy on desktop and mobile. I switched to them after my phone died and I saw how hard accessing my accounts was without a backup OTP device.
The solution is to have a cheap phone that you sync with your authy. I had the trifecta with my desktop, now I just have one backup device because of this change.
Re: End of Life for Twilio Authy Desktop App
#138Earlier quoted context omitted.
> I also use bitwarden, but not sure how I feel about passwords and totp being in the same app. I guess this depends on your threat model. In what cases would your password vault be compromised, but your TOTP vault still be secure? If someone gets access to your unlocked PC/phone, don't they then have access to both? Do you store your TOTP vault password in your password vault (obvious)? If someone gets into your pas…
>In what cases would your password vault be compromised, but your TOTP vault still be secure? If the password vault is on one device and the TOTP app on another then it would be harder for an attacker to get into both. I have the same concerns about passkeys. How is it secure if the only thing an attacker needs is a single method of accessing a single device?
> How is it secure if the only thing an attacker needs is a single method of accessing a single device?
You should have two-factor for your password vault as well, and that TOTP is stored on a separate device.
In other words, you replace the model of having password+TOTP for every account, to having one password+TOTP for your password vault, and effectively treat that password vault as an authentication service for yourself.
Re: End of Life for Twilio Authy Desktop App
#139Getting a user to install software on a desktop is probably one of the hardest things for a company to ask for in 2024. It's wild that you would have built up a userbase of ... tens of thousands? ... of technically knowledgeable people who want your product, get them to install and rely on your product on their actual 2024 desktop computer where they do actual work, then have some decision makers determine "ok time t…
I agree, seems short-sighted - they could have even just started charging a bit for it to keep it alive if necessary. No surprise though, after a fantastic start, twilio has turned into a sh*t company, unfortunately - I was a very early adaptor of many of their tools and services, and 1 by 1, they have all gone downhill. They should have sold the company while it still had a decent reputation, at this rate there will…
Twilio has taken a nosedive recently. Do you have any suggested alternatives for programmatic voice and text?
Re: End of Life for Twilio Authy Desktop App
#140Earlier quoted context omitted.
Two ways: - a Yubikey - a sparingly used email account with no 2FA, just a very long password 2FA through the sort-of-secret email account lets me get back into Bitwarden (and thus everything else) even if my house burns down and I lose access to all of my yubikeys. And auth on a device that doesn't easily support yubikeys, like older iPhones. 2FA is very useful, but highly overrated. If you have a sufficiently long…
Passwords don't protect against spoofed login pages.
Yeah, if you type your password in manually. Password managers protect against spoofed pages though.