Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ente Auth: open-source Authy alternative for 2FA

ente.io

Post reply on HN
Print view View original

191–200 of 209 posts

Re: Ente Auth: open-source Authy alternative for 2FA

#191

Post by nickburns »

omneity wrote: post #178
nickburns wrote: post #167

Earlier quoted context omitted.

You assume that because you were not able to overcome whatever error/s you encountered with Google Auth and Authy, that you were being forced to use MS Authenticator.

Pretty uncharitable interpretation on your end. I am a developer and went to the extent of verifying the content of the QR code and the optional URL for manually adding it. No OTP code in there. Try to be nicer next time.

I truly did not mean to come off as rude. The 'content of the QR code' would've revealed the actual seed and so would corroborate your assumption if you did, in fact, verify as much. I merey stated a troubleshooting fact. No offense intended.

Re: Ente Auth: open-source Authy alternative for 2FA

#192

Post by getcrunk »

jerrygoyal wrote: post #154
xp84 wrote: post #76

Earlier quoted context omitted.

THE problem with Authy in my humble opinion isn’t just that it’s an obnoxious proprietary app I shouldn’t need — it’s that it forces you to accept SMS as a get-out-of-security-free card. Being able to get a reset text to your registered number (and you MUST register a number, of course) unlocks all your OTPs for the attacker (who slipped some teenaged phone salesman $50 or a fake ID to swap your sims.) SMS is cancer…

curious, why SMS is insecure? It's not like a hacker can simply clone your sim.

They can clone it, they can eavesdrop on it by having hacked your phone, they can be eavesdropping on the wireless network. But the most likely is they can dupe your carrier to port your number out

Re: Ente Auth: open-source Authy alternative for 2FA

#193

Post by RulerOf »

snailmailman wrote: post #147
ecesena wrote: post #133

Earlier quoted context omitted.

Thank you. FWIW, my need comes primarily from non-technical/inexperienced users. I can't tell my parents/many friends to remember to "sign into all these apps" as soon as they get a new phone, or they loose access to banks & co. Regardless I appreciate that at least you made a conscious decision.

I’ve seen this happen. A family member set up google auth. Then later got a new phone. I know I’ve transferred google auth across phones in the past - although possibly over iTunes? The new iPhone setup process works differently I guess. My family member did the new transfer feature, then wiped the old phone. Then later discovered that they don’t have access to some important accounts, because google Authenticator wa…

> I know I’ve transferred google auth across phones in the past - although possibly over iTunes? The new iPhone setup process works differently I guess.

There were a few brief years where an encrypted iTunes backup was a perfect, universally-restorable image of an iOS device. You could back up an iPhone, pop out the SIM card, destroy the original phone, then pop the SIM into a new one, restore the backup, and it would be nearly-impossible to determine that the device was different from a daily UX standpoint. Even MS Exchange email sync would still work.

Then around the time that iCloud K/V store showed up (which may be coincidental), this stopped working. Every app would start up and ask you to log in. Email needs reauthentication. Encrypted iTunes backups aren't terribly useful anymore.

Re: Ente Auth: open-source Authy alternative for 2FA

#194

Post by rdslw »

vishnumohandas wrote: post #157
jerrygoyal wrote: post #153

Earlier quoted context omitted.

if i lose all my devices can i still recover 2fa accounts? I can do it in Authy with email and mobile verification.

Yes, you can. Ente Auth backs up your codes, end-to-end encrypted. You can access your data on any device, at any time with your email address and password (/recovery key).

Authy has one superb feature: you can switch a toggle to lick/unlock accessing a vault from new devices.

quite handy and can further increase security (trading it of course with lack of recovery would you lost all your devices).

Re: Ente Auth: open-source Authy alternative for 2FA

#195

Post by jamesthurley »

ksec wrote: post #182
ecesena wrote: post #133

Earlier quoted context omitted.

Thank you. FWIW, my need comes primarily from non-technical/inexperienced users. I can't tell my parents/many friends to remember to "sign into all these apps" as soon as they get a new phone, or they loose access to banks & co. Regardless I appreciate that at least you made a conscious decision.

> FWIW, my need comes primarily from non-technical/inexperienced users. I Number one reason why most of my friends and family dont want to buy a new iPhone. They hate the pain and the anxiety of upgrading. And Apple hasn't done anything to make it easier.

It’s extremely easy these days.. you just put the phones near each other when prompted and follow the instructions.

Re: Ente Auth: open-source Authy alternative for 2FA

#197

Post by omneity »

nickburns wrote: post #191
omneity wrote: post #178

Earlier quoted context omitted.

Pretty uncharitable interpretation on your end. I am a developer and went to the extent of verifying the content of the QR code and the optional URL for manually adding it. No OTP code in there. Try to be nicer next time.

I truly did not mean to come off as rude. The 'content of the QR code' would've revealed the actual seed and so would corroborate your assumption if you did, in fact, verify as much. I merey stated a troubleshooting fact. No offense intended.

My bad for misunderstanding the tone of your comment. I likely wouldn't have gone off in this direction if you asked me what measures I took to check the OTP code in a collaborative/constructive way rather than expressing doubt they way you did. Either way, all good.

Re: Ente Auth: open-source Authy alternative for 2FA

#198

Post by clemiclemen »

nerdponx wrote: post #171
ecesena wrote: post #133

Earlier quoted context omitted.

Thank you. FWIW, my need comes primarily from non-technical/inexperienced users. I can't tell my parents/many friends to remember to "sign into all these apps" as soon as they get a new phone, or they loose access to banks & co. Regardless I appreciate that at least you made a conscious decision.

OTP Auth supports iCloud sync in the paid version.

The free version does too. The paid version only adds cosmetics, last time I checked.

Re: Ente Auth: open-source Authy alternative for 2FA

#199

Post by nerdponx »

clemiclemen wrote: post #198
nerdponx wrote: post #171

Earlier quoted context omitted.

OTP Auth supports iCloud sync in the paid version.

The free version does too. The paid version only adds cosmetics, last time I checked.

I might be mixing that up with Strongbox. Either way, solid app and worth paying for.

Re: Ente Auth: open-source Authy alternative for 2FA

#200

Post by vishnumohandas »

rdslw wrote: post #194
vishnumohandas wrote: post #157

Earlier quoted context omitted.

Yes, you can. Ente Auth backs up your codes, end-to-end encrypted. You can access your data on any device, at any time with your email address and password (/recovery key).

Authy has one superb feature: you can switch a toggle to lick/unlock accessing a vault from new devices. quite handy and can further increase security (trading it of course with lack of recovery would you lost all your devices).

Interesting, thanks for sharing!
Post reply on HN