Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Aegis Authenticator – Open-source 2FA for Android

getaegis.app

Post reply on HN
Print view View original

111–120 of 121 posts

Re: Aegis Authenticator – Open-source 2FA for Android

#111

Post by iFreilicht »

shaicoleman wrote: post #105
circularfoyers wrote: post #104

Earlier quoted context omitted.

Thanks for responding. I should have mentioned I've been a user of andOTP for a few years so that's why I brought the comparison up. I wish more projects (including Aegis) mentioned what distinguishes themselves from very similar options. I think the fact that Aegis allows you to import from a number of other authenticators, notably proprietary ones, is an important feature in getting people to move over to an open s…

I tried andOTP again now, and I figured out why it was locking for me. I usually switch apps by clicking on the icon on the home screen, rather than the task switcher. When I launch it from the home screen it always re-locks.

This can be turned off in the settings: "Security" -> "Re-lock when going into the background"

Re: Aegis Authenticator – Open-source 2FA for Android

#112

Post by iFreilicht »

justaj wrote: post #109
shaicoleman wrote: post #98

Earlier quoted context omitted.

* Aegis has a nicer design * Aegis has an extensive import functionality, andOTP does not seems to have it * andOTP relocks every time you switch apps, which can be annoying if you need multiple codes when you login to multiple services. In Aegis that behaviour is configurable * andOTP makes you choose between biometric encryption and password, Aegis supports both at the same time * andOTP supports tags, Aegis does n…

Kind of sucks that the passphrase to open Aegis is also the passphrase that encrypts your backup. I have to access my 2FA app frequently, so I had to set the passphrase to 3 characters. Luckily the backup is only saved on the devices I own.

That's what the biometric access is for. Choose a strong password, use fingerprint or face-reader for quick access.

Re: Aegis Authenticator – Open-source 2FA for Android

#113

Post by shaicoleman »

iFreilicht wrote: post #111
shaicoleman wrote: post #105

Earlier quoted context omitted.

I tried andOTP again now, and I figured out why it was locking for me. I usually switch apps by clicking on the icon on the home screen, rather than the task switcher. When I launch it from the home screen it always re-locks.

This can be turned off in the settings: "Security" -> "Re-lock when going into the background"

I've already unticked all the Re-lock settings, and it still locks for me every time I launch it from the home screen/app drawer.

I tried also on another phone, and same thing.

Re: Aegis Authenticator – Open-source 2FA for Android

#114

Post by iFreilicht »

MayeulC wrote: post #42

I used to use andOTP, mainly because it was possible to export OTP tokens when upgrading or resetting my phone. Then IIRC I heard that andOTP wasn't that secure/maintained. Or maybe that their backup file encryption wasn't that great. I am not sure about these claims, but I migrated to Aegis , that could nicely import AndOTP tokens. Nowadays, I use it in combination with bitwarden (it supports OTP), which I use for m…

It works together with icon packs you installed as an app. I use Whicons, it has lovely monochrome icons for most sites I use.

Re: Aegis Authenticator – Open-source 2FA for Android

#115

Post by amiga-workbench »

alexbakker wrote: post #61
jdright wrote: post #60

Can this import from Google Authenticator?

One of the authors here. Yes! Aegis can scan the QR codes that Google Authenticator presents in the "Transfer accounts" screen. It's also possible to import directly from Google Authenticator's internal database if you have root access.

Thank you so much for this feature! Google Authenticator has been holding my phone ransom on Android 9. I've got way too many 2fa keys to reconfigure manually and add to a new client.

I'm all backed up and installing the latest Lineage OS build now.

Re: Aegis Authenticator – Open-source 2FA for Android

#116

Post by iFreilicht »

shaicoleman wrote: post #113
iFreilicht wrote: post #111

Earlier quoted context omitted.

This can be turned off in the settings: "Security" -> "Re-lock when going into the background"

I've already unticked all the Re-lock settings, and it still locks for me every time I launch it from the home screen/app drawer. I tried also on another phone, and same thing.

That seems like a bug, I didn't experience that before.

Re: Aegis Authenticator – Open-source 2FA for Android

#117

Post by iFreilicht »

shaicoleman wrote: post #62

I've switched to it recently, it's really great: * Open source * Has search functionality * Has biometric unlock functionality * Has no external dependencies (SMS/remote accounts) * Nice design/UX * Dark mode * Can import from other apps * Just works * Can do an encrypted export * Encrypted export can be read by other apps, see https://github.com/beemdevelopment/Aegis/blob/master/scripts...

Agree, I just imported all my 2F secrets from andOTP, which worked great. Having biometric access and a working cloud backup just makes it that little bit more accessible so it's actually a pleasure to use.

I also love that it has an option for a super-compact view. The default one takes up way too much space.

It's perfect, just donated a few beers to the author as well. You can do so, too: https://www.buymeacoffee.com/beemdevelopment

Re: Aegis Authenticator – Open-source 2FA for Android

#118

Post by justaj »

iFreilicht wrote: post #112
justaj wrote: post #109

Earlier quoted context omitted.

Kind of sucks that the passphrase to open Aegis is also the passphrase that encrypts your backup. I have to access my 2FA app frequently, so I had to set the passphrase to 3 characters. Luckily the backup is only saved on the devices I own.

That's what the biometric access is for. Choose a strong password, use fingerprint or face-reader for quick access.

I don't know. I'm not comfortable giving any software access to the fingerprint sensor (I've also taped it off), and definitely not as means of authentication.

Re: Aegis Authenticator – Open-source 2FA for Android

#120

Post by nikolay »

exabrial wrote: post #40

Sounds awesome! Authy is fricken awful. It requires SMS for "security" entirely defeating the purpose of 2FA. Worse off, some SAASs _require_ Authy specifically. Think about that. That means the security of an enterprise system at your company is completely dependent on whether or not an individual secures their personal cell phone account. Absolutely stupid, avoid Authy like the plague.

Authy is a disaster. It damaged my data and I got locked out from many services. At some point the app's generate token is not accepted - I've never had such issues with Microsoft Authenticator or 1Password's 2FA.
Post reply on HN