Live data from Hacker News

Warning: Google Authenticator upgrade loses all accounts

news.ycombinator.com

11–20 of 176 posts

Re: Warning: Google Authenticator upgrade loses all accounts

#11
post #7

For those looking for Google Authenticator alternatives, I recommend either Duo Mobile from Duo Security or Authy. I ditched Google Authenticator a while ago and haven't missed it one bit -- having a single app manage my two-factor tokens / keys is much more convenient.

Edited: Authy requires a mobile number and a remote server to store your tokens though.

Re: Warning: Google Authenticator upgrade loses all accounts

#12
If they had released this two weeks later, iOS 7's auto-update feature would have bricked everyone's accounts.

Google Auth 2.0 redefines two-factor auth: something you know + something you DON'T have. Their entire purpose in life is this second part and they completely and absolutely botched it. I can't believe this passed testing at both Google and Apple. There wasn't even a warning in the release notes.

Re: Warning: Google Authenticator upgrade loses all accounts

#14
post #11
post #7

For those looking for Google Authenticator alternatives, I recommend either Duo Mobile from Duo Security or Authy. I ditched Google Authenticator a while ago and haven't missed it one bit -- having a single app manage my two-factor tokens / keys is much more convenient.

Edited: Authy requires a mobile number and a remote server to store your tokens though.

This is not at all true. Both are generating your tokens clientside with no internet connection. Try disabling internet access, it should work.

As for the mobile number, I didn't have to type that into Duo Mobile when I installed?

Re: Warning: Google Authenticator upgrade loses all accounts

#15
post #11
post #7

For those looking for Google Authenticator alternatives, I recommend either Duo Mobile from Duo Security or Authy. I ditched Google Authenticator a while ago and haven't missed it one bit -- having a single app manage my two-factor tokens / keys is much more convenient.

Edited: Authy requires a mobile number and a remote server to store your tokens though.

Seriously. What's the difference between this and just setting up a webcam pointed at all your SecurID tokens?

Re: Warning: Google Authenticator upgrade loses all accounts

#16
Every time I upgraded to a new iOS 7 beta, it wiped my Google Authenticator account tokens. It wasn't a big deal with Google or Dropbox because both allow me to move. But I can't log in to my CampBX account anymore. I tried Authy today after another comment here on HN and it's been working so far.

Re: Warning: Google Authenticator upgrade loses all accounts

#17
post #6

I actually just switched to Duo Mobile earlier today because of iOS 7 issues with Authenticator; this just cements my decision to switch. Edit: oddly iOS 7 hasn't autoinstalled this yet.

> I actually just switched to Duo Mobile earlier today because of iOS 7 issues with Authenticator; this just cements my decision to switch. I moved all my non-critical stuff over (to test it out), saw the Google Authenticator update, and then had to go and reconfigure those accounts anyway. I highly recommend making sure your backup phone number is updated and verified and/or you have backup codes prepped.

Luckily I was still logged into all my accounts (my Dropbox account suddenly dropped from Google's app like a week ago)

Duo seems to be quite nice, I doubt I'll end up using the backup codes.

Incidentally, GitHub has it right - "download a text file of your backup codes" is much easier than "print this page nad hope you don't lose it"; I find find(1) outpaces my frantic drawer-emptying.

Re: Warning: Google Authenticator upgrade loses all accounts

#18
post #11
post #7

For those looking for Google Authenticator alternatives, I recommend either Duo Mobile from Duo Security or Authy. I ditched Google Authenticator a while ago and haven't missed it one bit -- having a single app manage my two-factor tokens / keys is much more convenient.

Edited: Authy requires a mobile number and a remote server to store your tokens though.

> Both require your mobile number and for a remote service to store all of your tokens though..

Duo does not, for the record. Download and go.

Post reply on HN