conciselyverbose 127 points 2 years ago

However, those who synced their desktop apps with the mobile versions have discovered that some of their tokens did not correctly synchronize, making their associate accounts inaccessible.

Lol

path: 0 11541541, hotness: undefined, score: 127, children: 9

specialseaweed 58 points 2 years ago

Well that fucking sucks.

save

path: 0 11541541 11543580, hotness: undefined, score: 58, children: 8

conciselyverbose 55 points 2 years ago

Yeah, laughing at the customers (who were making a good decision to make sure they had 2FA enabled) is kind of a dick move.

But from the perspective of the company fucking up that bad it's funny.

save

path: 0 11541541 11543580 11543667, hotness: undefined, score: 55, children: 7

specialseaweed 33 points 2 years ago

I use their phone app. I sure have a weekend chore to get the fuck off that app.

save

path: 0 11541541 11543580 11543667 11543701, hotness: undefined, score: 33, children: 6

femtech 17 points 2 years ago

Yeah, I told everyone at my company about it 2 months ago. I moved everything to bit warden.

save

path: 0 11541541 11543580 11543667 11543701 11544325, hotness: undefined, score: 17, children: 0

orca 6 points 2 years ago

I’ve been moving over to Okta’s app. Wondering if I should pick something else though. All of my credentials are in 1Password, but I don’t want my 2FA in the same place.

save

path: 0 11541541 11543580 11543667 11543701 11546531, hotness: undefined, score: 6, children: 4

_edge 64 points 2 years ago

I hope you all freed your 2fa secrets from this un-service.

save

path: 0 11541405, hotness: undefined, score: 64, children: 2

fne8w2ah 5 points 2 years ago

I did when the news first broke.

save

path: 0 11541405 11549841, hotness: undefined, score: 5, children: 1

net00 2 points 2 years ago

save

path: 0 11541405 11549841 11572169, hotness: undefined, score: 2, children: 0

Armand1 28 points 2 years ago

This prompted me to move away from Authy, and looking it up, it doesn't allow you to export your TOTP tokens. There were some workarounds but then have been plugged, I tried.

Mostly switched over to Bitwarden's equivalent. I've been using their password manager for many many years now and am very happy with it. They have an export feature in a few different formats.

save

path: 0 11554014, hotness: undefined, score: 28, children: 3

rekabis 6 points 2 years ago

I only ever used Authy as a single-item TOTP vault for BitWarden, but I moved off of it long before they ever mentioned the Windows app shutdown due to dissatisfaction with the UI. I just didn’t like their “card-like” interface, and they never offered a super-compact list-like interface. The card interface just wasted too much screen real estate, even on a desktop, and it just got immeasurably worse under mobile.

save

path: 0 11554014 11555813, hotness: undefined, score: 6, children: 0

retro 6 points 2 years ago

The work around did work however you needed to download an older archived version that was unpatched.

save

path: 0 11554014 11561800, hotness: undefined, score: 6, children: 1

Armand1 6 points 2 years ago

Yeah, I did that, but then it refused to let me log in, telling me the version was not secure or something.

Older versions appear to refuse to talk with their servers, at least that was the case for me.

save

path: 0 11554014 11561800 11566096, hotness: undefined, score: 6, children: 0

Boozilla 21 points 2 years ago

save

path: 0 11541517, hotness: undefined, score: 21, children: 25

PatrickYaa 65 points 2 years ago

I switched to Aegis

save

path: 0 11541517 11541605, hotness: undefined, score: 65, children: 6

beejjorgensen 17 points 2 years ago

I switched to Aegis when google authenticator didn't allow exports. It's simple and it works.

save

path: 0 11541517 11541605 11542489, hotness: undefined, score: 17, children: 5

Estebiu 0 points 2 years ago

Wait, google auth doesnt allow exports? For me it dies..? Am I missing something..?

save

path: 0 11541517 11541605 11542489 11543261, hotness: undefined, score: 0, children: 4

Scrollone 3 points 2 years ago

It allows exports but only is a stupid QR-code based format.

save

path: 0 11541517 11541605 11542489 11543261 11557434, hotness: undefined, score: 3, children: 1

beejjorgensen 1 point 2 years ago

It does now--it didn't in the past.

save

path: 0 11541517 11541605 11542489 11543261 11564827, hotness: undefined, score: 1, children: 1

fart_pickle 30 points 2 years ago

Bitwarden or Proton Pass.

save

path: 0 11541517 11542135, hotness: undefined, score: 30, children: 0

mosiacmango 16 points 2 years ago

Keepass. Standalone FOSS apps for desktop/phone. Has OTP support.

Password/tokens are stored in a small encrypted db file you can copy/paste anywhere you need it. Has hundreds of plugins to do various things.

Use something like syncthing/nextcloud/onedrive to keep the file in sync across devices.

save

path: 0 11541517 11543658, hotness: undefined, score: 16, children: 0

freecloudgal 12 points 2 years ago

Duo, Aegis, Bitwarden, Proton.

save

path: 0 11541517 11543546, hotness: undefined, score: 12, children: 0

Eezyville 9 points 2 years ago

I use KeePassXC and a Yubikey 5. You can store a certain number of 2fa on the key but i also back up the secret key and recovery codes on KeePassXC which is backed up on my Nextcloud. When using the Yubikey there is an app on desktop and mobile that reads they key but doesn't store the codes. Open the app, plug in the key, the TOTP appears, take the key out and the TOTP is gone.

save

path: 0 11541517 11544963, hotness: undefined, score: 9, children: 0

BakedCatboy 8 points 2 years ago

I like using bitwarden, the selfhosted vaultwarden server stores it with passwords and makes codes available in the app / browser extension. I also keep them backed up on a nas and synced off-site just in case.

save

path: 0 11541517 11541676, hotness: undefined, score: 8, children: 0

haulyard 7 points 2 years ago

Along with others already mentioned, 1Password can support 2fa.

save

path: 0 11541517 11545980, hotness: undefined, score: 7, children: 1

batcheck 2 points 2 years ago

1Password has impressed me. I’ve used KeePassXC, LastPass, Bitwarden (but not extensively and one of the early versions), and even CyberArk (🤮).

1Password is closed source but it’s one of those pieces of software that just works the way you expect it to. Hard to confirm a lot of their security claims. Just rolling with “Have not heard a lot about 1Password breaches” mentality.

We got lucky at work and used it to replace an unmanageable long list of KeePass database files that were sprawling everywhere. With that everyone who uses 1Password at work gets an associate private family account. Made managing my kids passwords and share some of our common family passwords way easier and I still get to lock them out of my passwords I don’t want them using.

I believe modern Bitwarden for enterprise has a similar licensing sweetener with a private family account for each corporate account.

save

path: 0 11541517 11545980 11548275, hotness: undefined, score: 2, children: 0

kolorafa 5 points 2 years ago

andOTP + bitwarden for me

save

path: 0 11541517 11541972, hotness: undefined, score: 5, children: 3

mosiacmango 2 points 2 years ago

AndOTP is great. Its free and had simple and easy encrypted backups. I love how its timer counts down, not up like some others and highlights the token in red so you know you need to hustle or wait.

save

path: 0 11541517 11541972 11543726, hotness: undefined, score: 2, children: 2

tja 1 point 2 years ago

It seems I cannot install it because the app is too old for Android 14..

save

path: 0 11541517 11541972 11543726 11553031, hotness: undefined, score: 1, children: 1

saiarcot895 1 point 2 years ago

That's odd, I'm on Android 14 and have andOTP installed.

save

path: 0 11541517 11541972 11543726 11553031 11566554, hotness: undefined, score: 1, children: 0

Damage 4 points 2 years ago

I switched to Ente Auth some time ago when bad news about authy started getting out

save

path: 0 11541517 11544436, hotness: undefined, score: 4, children: 1

anas 1 point 2 years ago

Same here, have no problems so far.

save

path: 0 11541517 11544436 11555693, hotness: undefined, score: 1, children: 0

Fubarberry 3 points 2 years ago

A lot of password managers support 2fa now. I use Enpass because I got a lifetime license a long time ago (it's also available to people with Google Play pass), but I know some other popular options have it too.

save

path: 0 11541517 11542718, hotness: undefined, score: 3, children: 4

BorgDrone 13 points 2 years ago

The whole point of 2FA is to keep the second factor separate from the first. If you store both in the same password manager app that defeats the entire point of 2FA.

save

path: 0 11541517 11542718 11543423, hotness: undefined, score: 13, children: 3

hikaru755 20 points 2 years ago

It still protects you from your passwords being compromised in any way except through a compromise of the password manager itself. Yes, it's worse than keeping them separate, but it's also still much better than not having 2fa at all.

save

path: 0 11541517 11542718 11543423 11543505, hotness: undefined, score: 20, children: 0

Pika 1 point 2 years ago

I only switched to keepass due to the fact that nothing seems to support a desktop application like authy did. Not everyone keeps a phone on them 24/7. If they don't want that risk they would allow desktop apps. least in my opinion

save

path: 0 11541517 11542718 11543423 11571158, hotness: undefined, score: 1, children: 0

EngineerGaming 1 point 2 years ago

save

path: 0 11541517 11542718 11543423 11548899, hotness: undefined, score: 1, children: 0

sheogorath 14 points 2 years ago

Well that's already my Monday morning gone. I use Authy desktop for all of my work 2FA tokens.

save

path: 0 11553835, hotness: undefined, score: 14, children: 2

bfg9k 13 points 2 years ago

KeePass has native TOTP support now

save

path: 0 11553835 11562238, hotness: undefined, score: 13, children: 1

Pika 1 point 2 years ago

this is what I did, syncthing syncs the DB across all my devices(including my phone), and it uses a certificate key + password for the master. It lets me secure all my stuff in one location without having to mess with my phone.

I know it's less secure but, nobody has a desktop app anymore, so I would rather just have it all in one place then have to dedicate another mobile app for it.

save

path: 0 11553835 11562238 11571355, hotness: undefined, score: 1, children: 0

zer0squar3d 10 points 2 years ago

Welp, time to finally migrate one at a time to Proton.

save

path: 0 11560906, hotness: undefined, score: 10, children: 2

EngineerGaming 13 points 2 years ago

save

path: 0 11560906 11567130, hotness: undefined, score: 13, children: 1

zer0squar3d 1 point 2 years ago

I moved from keepassxc to bitwarden then to proton pass when it was released. I'm not going back. I keep my recovery codes separate to prevent a complete lockout. But thanks for the suggestions.

save

path: 0 11560906 11567130 11620251, hotness: undefined, score: 1, children: 0

gedaliyah 8 points 2 years ago

I used Authy a couple years ago, do I need to be worried?

save

path: 0 11541609, hotness: undefined, score: 8, children: 2

PlutoniumAcid 5 points 2 years ago

Only if you use it currently. Otherwise no worries.

save

path: 0 11541609 11548875, hotness: undefined, score: 5, children: 1

gedaliyah 1 point 2 years ago

Thanks. I couldn't understand if there was a data breach that led to this or if it was just current users.