Does anyone have a recommendation for an Open Source 2FA OTP app? That's the only thing I use Authy for, to scan the QR Codes into the App and generate the 2FA tokens, but in a way that allows me to migrate to another phone without having to re-set all the 2FA tokens on the vendor side.
I‘m using Raivo. It hasn’t let me down, yet
Twilio confirms data breach after hackers leak 33M Authy user phone numbers
51–60 of 408 posts
Re: Twilio confirms data breach after hackers leak 33M Authy user phone numbers
#52I use Authy’s iOS app to generate 2FA tokens for a few accounts. I cannot remember ever entering my phone number into it, or establishing an Authy account of any kind. Is there some other way they would have acquired my phone number? I’m trying see if the issue is some unanticipated issue with the iOS client app itself, or if it is only affecting people who created online accounts with Authy to sync their 2FA credent…
Have you looked into the settings? On android you can see a cellphone-number and e-mail there. If they are missing, I guess it's not known to them.
Re: Twilio confirms data breach after hackers leak 33M Authy user phone numbers
#53Does anyone have a recommendation for an Open Source 2FA OTP app? That's the only thing I use Authy for, to scan the QR Codes into the App and generate the 2FA tokens, but in a way that allows me to migrate to another phone without having to re-set all the 2FA tokens on the vendor side.
Re: Twilio confirms data breach after hackers leak 33M Authy user phone numbers
#54Does anyone have a recommendation for an Open Source 2FA OTP app? That's the only thing I use Authy for, to scan the QR Codes into the App and generate the 2FA tokens, but in a way that allows me to migrate to another phone without having to re-set all the 2FA tokens on the vendor side.
And you actually know what is going on. Works for GitHub.
Re: Twilio confirms data breach after hackers leak 33M Authy user phone numbers
#55Does anyone have a recommendation for an Open Source 2FA OTP app? That's the only thing I use Authy for, to scan the QR Codes into the App and generate the 2FA tokens, but in a way that allows me to migrate to another phone without having to re-set all the 2FA tokens on the vendor side.
https://f-droid.org/packages/com.beemdevelopment.aegis/
Or if you have a YubiKey you could also use it for TOTPs
Windows, Linux, Android: https://github.com/Yubico/yubioath-flutter
iOs: https://github.com/Yubico/yubioath-ios
I personally use Bitwarden for TOTPs (with a self hosted vaultwarden instance), it's by far not the most secure way to store your passwords and TOTPs next to each other, but it saves so much time.
Re: Twilio confirms data breach after hackers leak 33M Authy user phone numbers
#56Does anyone have a recommendation for an Open Source 2FA OTP app? That's the only thing I use Authy for, to scan the QR Codes into the App and generate the 2FA tokens, but in a way that allows me to migrate to another phone without having to re-set all the 2FA tokens on the vendor side.
I've implanted my 2FA token in my arm and just hope it never breaks :D
Re: Twilio confirms data breach after hackers leak 33M Authy user phone numbers
#57There really has to be steep repercussions for companies that fail to protect user data like this. At this point I can't help but feel that there is wilful neglect with the aim of exfiltrating data with unknowable aim. Our digital data must be recognized as human rights but lately the world has been vocal about it but silent when it comes to action and enforcement. More and more reason why people no longer trust clou…
But phone numbers aren’t something I’d consider confidential in most cases. Hell, we used to publish our phone numbers in physical books and give them to the whole town for free (literally).
The data was even monetized with ads plastering every page. I guess the digital age isn’t all that different from the analog age (in certain ways!)
Re: Twilio confirms data breach after hackers leak 33M Authy user phone numbers
#58Does anyone have a recommendation for an Open Source 2FA OTP app? That's the only thing I use Authy for, to scan the QR Codes into the App and generate the 2FA tokens, but in a way that allows me to migrate to another phone without having to re-set all the 2FA tokens on the vendor side.
For Android I'd recommend Aegis https://f-droid.org/packages/com.beemdevelopment.aegis/ Or if you have a YubiKey you could also use it for TOTPs Windows, Linux, Android: https://github.com/Yubico/yubioath-flutter iOs: https://github.com/Yubico/yubioath-ios I personally use Bitwarden for TOTPs (with a self hosted vaultwarden instance), it's by far not the most secure way to store your passwords and TOTPs next to each…
I migrated to Aegis a while back because I wasn't happy with how hard it is to get secrets out of Authy, or that someone else is managing them, and they they need my phone number (guess I was right, again).
I use Folder Sync on my Android to sync the Aegis auto-backups to a MinIO bucket I host at home.
Re: Twilio confirms data breach after hackers leak 33M Authy user phone numbers
#59Does anyone have a recommendation for an Open Source 2FA OTP app? That's the only thing I use Authy for, to scan the QR Codes into the App and generate the 2FA tokens, but in a way that allows me to migrate to another phone without having to re-set all the 2FA tokens on the vendor side.
I'm of the opinion that it's basically fine yo store them in your password manager. Yes if your password manager is broken into you lose everything (same as having no 2fa in that case), but you still prevent people from guessing your password and often avoid having to deal with email- or text-based 2fa. And if your password manager is broken into, there's a good chance your device has been broken into, in which case…
When it’s not a system I’m deeply concerned about I will just use the 2FA on the password manager.
Re: Twilio confirms data breach after hackers leak 33M Authy user phone numbers
#60Does anyone have a recommendation for an Open Source 2FA OTP app? That's the only thing I use Authy for, to scan the QR Codes into the App and generate the 2FA tokens, but in a way that allows me to migrate to another phone without having to re-set all the 2FA tokens on the vendor side.