What's the Bitwarden of 2 Factor authentication?

3 years ago by Kyoyeou (Ki jəʊ juː) to c/privacy

Hey, I need to move one day of Google Authenticator, and I was wondering if their was a project like Bitwarden for 2 Factor Authentication

Take care!

landordragen 10 points 3 years ago path: 0 246106, hotness: undefined, score: 10, children: 2
radau 2 points 3 years ago

Been using Aegis for a couple years and love it

path: 0 246106 304608, hotness: undefined, score: 2, children: 0
Br0adbean 1 point 3 years ago
path: 0 246106 253500, hotness: undefined, score: 1, children: 0
conscious_coma 6 points 3 years ago
path: 0 244528, hotness: undefined, score: 6, children: 2
Kyoyeou 3 points 3 years ago

Wow, the program that keeps on giving, I'm surprised, I just checked, and I think I'm going to move my 2FA to Bitwarden

path: 0 244528 245332, hotness: undefined, score: 3, children: 1
tkchumly 1 point 3 years ago

I use bitwarden for the bulk of my 2fas and aegis for the 2fa for bitwarden itself and a couple other sensitive/important sites that I want separated. Be sure to back up your 2fas somehow for bitwarden.

path: 0 244528 245332 252680, hotness: undefined, score: 1, children: 0
joshuaacasey 5 points 3 years ago
path: 0 244675, hotness: undefined, score: 5, children: 0
novarime 3 points 3 years ago

Bitwarden provides a facility for MFA. Though there's an argument to be made against eggs + baskets. It might defeat threw purpose a bit.

I use Aegis which is opensource and easily encrypted and backed up locally. Saved my ass where I accidentally deleted my 2FA for Bitwarden, thus locking me out in circle of shite. Aegis allowed me to roll back and pull in that one missing key without having to redo a load i'd made since the last backup and all was good.

path: 0 244914, hotness: undefined, score: 3, children: 4
toxic 5 points 3 years ago

Yea, I think everyone that is saying Bitwarden supports 2FA is missing the point of 2FA. You don’t want it to be in the same place where all your passwords are, otherwise if someone gets access to your passwords they essentially can prove they are you.

That being said, I use a mixture of Authy + Bitwarden. Bitwarden for sites that require it but aren’t really a priority for me to keep separated, and Authy for 2FA codes that I prefer being separate from my passwords.

path: 0 244914 247140, hotness: undefined, score: 5, children: 3
Kyoyeou 3 points 3 years ago

Reading everyone's comments here I thought I would go full Bitwarden, but I get the idea of have the 2 factor's coming from the exact same place

path: 0 244914 247140 247378, hotness: undefined, score: 3, children: 1
toxic 1 point 3 years ago

Yea, the whole point of 2FA is to make it so if your credentials are leaked you aren’t compromised!

path: 0 244914 247140 247378 256695, hotness: undefined, score: 1, children: 0
galil3o 1 point 3 years ago

This is the way

path: 0 244914 247140 251803, hotness: undefined, score: 1, children: 0
Tau 3 points 3 years ago

FreeOTP+

path: 0 248605, hotness: undefined, score: 3, children: 0
dethleffs 3 points 3 years ago

Aegis on fdroid

path: 0 245618, hotness: undefined, score: 3, children: 0
provisional 3 points 3 years ago

You can use Bitwarden Premium for 2FA keys. It's pretty cheap and well worth it to support development ($10/yr).

If you're on Android and don't want to pay for Bitwarden Premium, I'd use something like Aegis Authenticator.

path: 0 245518, hotness: undefined, score: 3, children: 2
trex 2 points 3 years ago

Yes, I do this too and really like it.

path: 0 245518 246282, hotness: undefined, score: 2, children: 0
paperclipgroove 1 point 3 years ago

I personally think it's best to keep 2FA keys out of password managers.

The whole point of 2FA is to have a seconds factor to authenticate you.

If someone gets access to your password vault with your 2FA keys, they have access to all of your accounts - 2FA protected it not. If you keep the keys in another app, they cannot access your accounts nearly as easily.

path: 0 245518 248823, hotness: undefined, score: 1, children: 0
Sleeping 2 points 3 years ago

TOTP is available in Bitwarden.

path: 0 245241, hotness: undefined, score: 2, children: 0
confetti_8tVST5 2 points 3 years ago
path: 0 299852, hotness: undefined, score: 2, children: 0
Schrottkatze 2 points 3 years ago

Yes: Bitwarden.

Idk about the central instance, but I use my bitwarden (specifically vaultwarden) instance for my TOTP keys. I can just autofill and then it copies the current TOTP key and i can paste it in to log into whatever i'm logging into!

path: 0 246251, hotness: undefined, score: 2, children: 0
TwilightKiddy 2 points 3 years ago

KeePass. You need TOTP plugin for Windows and there is a nice Android app that implements it out of the box. They also support Steam OTP, though it's a bit hard to set up.

There is also KeePassXC if you want a cross-platform client, but I have no idea how good it is as I never used it.

path: 0 244523, hotness: undefined, score: 2, children: 4
tkchumly 3 points 3 years ago

KeepassXC is a really good option. I was using it for a while and it was great but bitwarden syncing is just so convenient.

path: 0 244523 252747, hotness: undefined, score: 3, children: 3
TwilightKiddy 2 points 3 years ago

I'm just hosting a file server for that. A bit too concerned about giving my passwords to a third party.

path: 0 244523 252747 259652, hotness: undefined, score: 2, children: 1
JoeKrogan 1 point 3 years ago

You should be, its the keys to the kingdom.

path: 0 244523 252747 259652 285502, hotness: undefined, score: 1, children: 0
JoeKrogan 1 point 3 years ago

Syncthing is what I and many other use for syncing.

path: 0 244523 252747 285483, hotness: undefined, score: 1, children: 0
arkcom 2 points 3 years ago

Yubikey is a good option. It supports totp for sites that don't support physical keys.

path: 0 246050, hotness: undefined, score: 2, children: 5
Kyoyeou 2 points 3 years ago

I don't think I'd go with Yubikey, but just because that's what I'm using at work, that's the only reason

path: 0 246050 247419, hotness: undefined, score: 2, children: 0
trex 1 point 3 years ago

I have been tempted to get yubikeys but it seems like a hassle to have two and keep them in "sync".

path: 0 246050 246365, hotness: undefined, score: 1, children: 3
joshuaacasey 2 points 3 years ago
path: 0 246050 246365 250547, hotness: undefined, score: 2, children: 2
kitonthenet 1 point 3 years ago

This is the way tbh. Though honestly it’s not bad to have two, usually when a website has an MFA flow you can set up the second at the same time, I only have one 5C NFC and it works with my phone and laptops (and iPad)

path: 0 246050 246365 250547 251988, hotness: undefined, score: 1, children: 1
joshuaacasey 1 point 3 years ago
path: 0 246050 246365 250547 251988 252872, hotness: undefined, score: 1, children: 0
TruthButtCharioteer 2 points 3 years ago

I use FreeOTP+ on android and WinAuth on windows

path: 0 245709, hotness: undefined, score: 2, children: 0
humaneTotalitarianism 2 points 3 years ago path: 0 244673, hotness: undefined, score: 2, children: 0
nicman24 2 points 3 years ago

i personally like freeotp made by redhat iirc

path: 0 246363, hotness: undefined, score: 2, children: 0
plisken 2 points 3 years ago path: 0 244688, hotness: undefined, score: 2, children: 0
nikore 1 point 3 years ago

I use 2FAuth, it works on both mobile and desktop. I moved to that from Google Authenticator.

path: 0 258560, hotness: undefined, score: 1, children: 0
andscape 1 point 3 years ago

Bitwarden supports OTP codes, you need a premium subscription though

path: 0 244646, hotness: undefined, score: 1, children: 0
preciouspupp 1 point 3 years ago path: 0 244927, hotness: undefined, score: 1, children: 0
alfredb 1 point 3 years ago

Bitwarden can 2FA. Works like a charm.

path: 0 245264, hotness: undefined, score: 1, children: 0
JasSmith 1 point 3 years ago

I've been using Authy for years, but I don't think it's open source.

path: 0 245724, hotness: undefined, score: 1, children: 0
scott 1 point 3 years ago

You can have your 2FA codes in BitWarden.

People say it defeats the purpose of 2FA but each to their own.

path: 0 286791, hotness: undefined, score: 1, children: 0
JoeKrogan 1 point 3 years ago

If you want an app I would recommend freeotp+ is on fdroid and you can export/import your settings for backup. I use sync thing for this. I

path: 0 285364, hotness: undefined, score: 1, children: 0
envis10n 1 point 3 years ago

I use andOTP on Android. Has encrypted backups, supports various OTP protocols, and is just generally a good UX.

path: 0 261974, hotness: undefined, score: 1, children: 0
Zomg 1 point 3 years ago

If you're interested in moving away from Google Auth, look into a password manager for added security. Along with storing passwords, managers like 1password support 2FA and store your information in the cloud using a Zero Knowledge model. I've been using it for a few years and have not had any reason to use Google Auth.

path: 0 247602, hotness: undefined, score: 1, children: 0
mrmanager 1 point 3 years ago

I use Authy which is great. Much better than google authenticator.

Bitwarden is also great, but I kind of don't want everything to be in one place.

path: 0 248517, hotness: undefined, score: 1, children: 0
Gleddified 1 point 3 years ago

I personally use yubioath for anything that doesn't support yubikey. Sounds like that isn't a solution for you (maybe a totally different, open source hardware key?).

I'd recommend against putting your 2FA inside bitwarden. It's not a very good second factor if both factors can be exposed by getting into your bitwarden.

path: 0 271589, hotness: undefined, score: 1, children: 1
Kyoyeou 2 points 3 years ago

It not that isn't absolutely not a solution, but more that I want to split work and life, and I know I could have some remarks if my collegue see the app of the keys used on my not work phone and I could just avoid certain discussions

path: 0 271589 277140, hotness: undefined, score: 2, children: 0
privacy
privacy

@lemmy.ml

login for more options
51487
5303
4580

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
  • Don't promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

go to feed...