Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ente Auth: open-source Authy alternative for 2FA

ente.io

Post reply on HN
Print view View original

21–30 of 209 posts

Re: Ente Auth: open-source Authy alternative for 2FA

#21

Post by robxorb »

evolve2k wrote: post #19

My hunt for an open source Authy took me to 2FAS, which has been fine. Any opinions on this offering? 2FAS — the Internet’s favorite open-source two-factor authenticator https://2fas.com

> 2FAS syncs across your mobile devices.

[...]

> 2FAS works offline.

> 2FAS doesn't store any passwords or metadata.

Eh?

Re: Ente Auth: open-source Authy alternative for 2FA

#22

Post by uyzstvqs »

csdreamer7 wrote: post #8

People complaining about an "Authy jail" and yet I have no issues with Aegis. Which is also open source, available in the f-droid store, and been around for years.

Aegis, Bitwarden Authenticator, FreeOTP, and now Ente Auth. These are the best ones.

Re: Ente Auth: open-source Authy alternative for 2FA

#24

Post by mcpeepants »

robxorb wrote: post #21
evolve2k wrote: post #19

My hunt for an open source Authy took me to 2FAS, which has been fine. Any opinions on this offering? 2FAS — the Internet’s favorite open-source two-factor authenticator https://2fas.com

> 2FAS syncs across your mobile devices. [...] > 2FAS works offline. > 2FAS doesn't store any passwords or metadata. Eh?

this is storing/syncing the shared secret used to generate the TOTP. generating the TOTP is fully offline.

Re: Ente Auth: open-source Authy alternative for 2FA

#25

Post by abhinavk »

robxorb wrote: post #21
evolve2k wrote: post #19

My hunt for an open source Authy took me to 2FAS, which has been fine. Any opinions on this offering? 2FAS — the Internet’s favorite open-source two-factor authenticator https://2fas.com

> 2FAS syncs across your mobile devices. [...] > 2FAS works offline. > 2FAS doesn't store any passwords or metadata. Eh?

Syncing happens via files in your iCloud Drive.

Re: Ente Auth: open-source Authy alternative for 2FA

#26

Post by ffpip »

pebblesun wrote: post #23

Is there any problem using Password Manager's feature to get 2FA codes? I use 1Password and it has this feature built in and automatically fills after filling the password. Even iPhone's latest Password app also has this built in.

Storing passwords and 2FA in one place only protects you against password reuse, password leaks, and some more common threats that the large majority of people should be looking out for.

It is still a lot better than no 2FA, and more than sufficient for the average person.

For someone looking to improve their security a bit more and for someone with a "don't trust anyone" model, having a separate 2FA app has it's advantages. It protects them against unencrypted password DB leaks, security vulnerabilities in the password manager, or any intentional security threat induced by the developer of the password manager

Re: Ente Auth: open-source Authy alternative for 2FA

#29

Post by nicpottier »

This looks quite nice, thank you for releasing it open source. Also neat to see a real Flutter app in the wild, this seems like a great use case for it. Would love to read your experience building something polished across ios/android on Flutter.

One note as I signed up for an account is that the email verification went to gmails spam. Probably nothing to be done about that but mentioning it.

I would also add an "authy" option when importing that just goes to an explanation of why it isn't possible and steps you can take to create new tokens etc.

In any case, well done and thank you!

Post reply on HN