Live data from Hacker News

Authy: Faster Two-Factor Authentication

authy.com

1–10 of 99 posts

Re: Authy: Faster Two-Factor Authentication

#3

Hi, I'm Daniel, Authy Founder. We've worked almost 18 months on this product, it's surreal to finally see it out. Anyway, you can read more about why we did this here: http://blog.authy.com/thefuture

Hello,

This looks awesome.

When could we expect a Windows 7/8 app ?

Congrats

Re: Authy: Faster Two-Factor Authentication

#4

Hi, I'm Daniel, Authy Founder. We've worked almost 18 months on this product, it's surreal to finally see it out. Anyway, you can read more about why we did this here: http://blog.authy.com/thefuture

Hello, This looks awesome. When could we expect a Windows 7/8 app ? Congrats

Probably. At this point we are testings things out and want to move as fast as possible. We want to make Two-Factor Authentication completely transparent, and we'll be launching other exciting things to see how they work in the real world.

Once we have the experience nailed out, we'll ported to other platforms.

Re: Authy: Faster Two-Factor Authentication

#5
I like the design, the website, the phone app, etc.

However, the desktop app does not feel right. Maybe I am missing something.

- Are the HMAC keys stored or synced to the desktop?

- Is there a password protection similar to the keychain to access these passwords?

If my desktop is hacked into and a key logger has my password as they usually do, it will now also be able to copy these one time passwords at will and use it frequently to log into my account.

I would prefer to use my laptop and a separate phone for my OTPs. I like the Google Authenticator app as it does nothing more than generate OTPs, no sync to server, etc..

Re: Authy: Faster Two-Factor Authentication

#7

I like the design, the website, the phone app, etc. However, the desktop app does not feel right. Maybe I am missing something. - Are the HMAC keys stored or synced to the desktop? - Is there a password protection similar to the keychain to access these passwords? If my desktop is hacked into and a key logger has my password as they usually do, it will now also be able to copy these one time passwords at will and use…

Hey James,

"- Are the HMAC keys stored or synced to the desktop? No, nothing is stored in the desktop. Everything remains on your phone."

"- Is there a password protection similar to the keychain to access these passwords? We store the pair phone details on the keychain. But this is only the phone bluetooth id etc."

"If my desktop is hacked into and a key logger has my password as they usually do, it will now also be able to copy these one time passwords at will and use it frequently to log into my account."

No, again nothing is stored on your computer.

Re: Authy: Faster Two-Factor Authentication

#8

Hi, I'm Daniel, Authy Founder. We've worked almost 18 months on this product, it's surreal to finally see it out. Anyway, you can read more about why we did this here: http://blog.authy.com/thefuture

Quite handsome and useful looking. Good job!

Just a quick question, under security it says:

>>". Authy Bluetooth will only talk to pre-approved computers and all messages are encrypted."

Just wondering if you can speak to what sort of encryption and safeguards you've got going on here. The docs cover how the tokens are created, but not the communication between phone and mac.

Seems like an awesome thing but I wouldn't feel comfortable using it for work without knowing a bit more.

Re: Authy: Faster Two-Factor Authentication

#9

Earlier quoted context omitted.

Hello, This looks awesome. When could we expect a Windows 7/8 app ? Congrats

Probably. At this point we are testings things out and want to move as fast as possible. We want to make Two-Factor Authentication completely transparent, and we'll be launching other exciting things to see how they work in the real world. Once we have the experience nailed out, we'll ported to other platforms.

I hope you are planning a Linux release too. So many companies leave us out, even though we're even more willing to work past bugs and set things up correctly.

Re: Authy: Faster Two-Factor Authentication

#10

Hi, I'm Daniel, Authy Founder. We've worked almost 18 months on this product, it's surreal to finally see it out. Anyway, you can read more about why we did this here: http://blog.authy.com/thefuture

A lot of us are familiar with two factor authentication with Google Authenticator. Could you give us a run through of the differences between GA and Authy? What are the advantages of Authy over GA?

Edit: suggestions - do not ask for cellphone number twice. Sending SMS PIN as a link is a bit weird.

Post reply on HN