Live data from Hacker News

De-Googling TOTP Authenticator Codes

imrannazar.com

1–10 of 138 posts

Re: De-Googling TOTP Authenticator Codes

#4
post #2

For years I've managed all my TOTP codes with KeepassXC. Not a single problem, great software.

Just consider that storing TOTP codes in the password manager negates the advantage of two factors authentication, namely the added security of needing a second device. This would keep your logins safe even if somebody managed to breach your KeePassXC database.

Re: De-Googling TOTP Authenticator Codes

#6
post #3
post #2

For years I've managed all my TOTP codes with KeepassXC. Not a single problem, great software.

I can recommend the Aegis app for Android. Works great and has encrypted backups.

Or Ente Auth: https://ente.io/auth. Opensource, encrypted, can be used on any OS, has sync/backup. The problem with using same password manager for OTP is that you kind of loose 2nd factor: 1 app compromised - passwords and OTP are compromised too. My approach is to use password manager's OTP generator for non critical services and dedicated app for the critical ones..
Post reply on HN