Live data from Hacker News

Warning: Google Authenticator upgrade loses all accounts

news.ycombinator.com

101–110 of 176 posts

Re: Warning: Google Authenticator upgrade loses all accounts

#101
post #27
post #11

Earlier quoted context omitted.

Edited: Authy requires a mobile number and a remote server to store your tokens though.

Duo does not require this at all. And Authy only requires you to store their "Authy" token. You can add additional, e.g. Github, tokens to Authy and choose not to sync them with the Authy servers. That's what I do.

Authy requires your mobile phone number and the creation of an account to work at all … or am I missing something? I haven't found a way to use Authy without providing my mobile phone number and creating an account.

Re: Warning: Google Authenticator upgrade loses all accounts

#102
post #11

Earlier quoted context omitted.

Edited: Authy requires a mobile number and a remote server to store your tokens though.

> Both require your mobile number and for a remote service to store all of your tokens though.. Duo does not, for the record. Download and go.

[deleted]

Re: Warning: Google Authenticator upgrade loses all accounts

#106
post #73
post #7

For those looking for Google Authenticator alternatives, I recommend either Duo Mobile from Duo Security or Authy. I ditched Google Authenticator a while ago and haven't missed it one bit -- having a single app manage my two-factor tokens / keys is much more convenient.

I switched to HDE-OTP[0] a while ago and never looked back. I've not encountered any bugs with it and it's also better looking. [0] https://itunes.apple.com/gb/app/hde-otp-generator/id57124032...

You have a beautiful screen on your iPhone with great font rendering and ... it mimics a 7 segment LCD display.

For shame.

Re: Warning: Google Authenticator upgrade loses all accounts

#108
post #100

Too late for me, but a pleasingly fast and pro-active response from AWS (which rather shows Google up) just received by email: "If you are an AWS customer who uses Google Authenticator for iOS as a multi-factor authentication device to secure your AWS account via AWS MFA ( http://aws.amazon.com/mfa/ ), please read on. We are writing to inform you that Google has recently released an update to the Google Authenticator…

I scan the 2D barcode on two apps Google Authenticator and Authy. I also set up SMS Backup and it works well for Gmail/Hotmail accounts.

Re: Warning: Google Authenticator upgrade loses all accounts

#109
post #87

Earlier quoted context omitted.

> You can no longer log in to your Google account without one of the 10 printed one-time access codes you made when you first set it up. * or a backup phone number that's been verified (i.e. send a verification code and confirmed).

Hm, the point of authenticator is to not use the phone, because phjone numbers may be more vulnerable. wasn't there a case of social hacking where the telco forwarded to hacker's phone?

That was a case of them circumventing the 2FA he had, they just granted access. Authenticator is a mobile phone app, how are you supposed not to use your phone with it?

Re: Warning: Google Authenticator upgrade loses all accounts

#110

Not an iPhone user, but I wonder if you could access the key data manually and restore it afterwards? On Android that's possible (if you have root....) by accessing the key database (sqlite in that case). I did that to duplicate the keys from my handset to my tablet.

Yes, if you have synced with iTunes before the update. If that's the case you have to delete the updated app from the phone, connect phone to iTunes (do not sync or transfer purchases) and copy over the old app from iTunes to phone and it will restore the old version + app data.
Post reply on HN