What 2FA app are you switching to? (iOS)

3 years ago by Senjutsu to c/privacyguides

As we all know, Ravio has been removed from the recommended multi-factor authentication apps for iOS on PrivacyGuides.

As I want to export all my TOTP codes out of Ravio ASAP, what apps are you migrating towards? I know a few were mentioned such as:

• Tofu • Ente • 2FAS • FreeOTP • Bitwarden TOTP + Yubikey

unbuckled 13 points 3 years ago

I switched to 2FAS.

You can’t export from FreeOTP. Ente doesn’t appear to be open source. Tofu is an option but I’m afraid it might not be maintained.

Edit: Use Ente. It’s the best option.

path: 0 1927046, hotness: undefined, score: 13, children: 3
sir_whocampsalot 2 points 3 years ago
path: 0 1927046 1929310, hotness: undefined, score: 2, children: 0
opt9 1 point 3 years ago

You can export from freeOTP+ Its great. You can back up to another password manager by simply copying the shared secret also. But I don't think it's available for iOS. Oh well, if you want more freedom and privacy, you'll have to move to android.

path: 0 1927046 1961973, hotness: undefined, score: 1, children: 0
humuhumu 1 point 2 years ago

Tofu is an option but I’m afraid it might not be maintained.

They made an annoucement 2 weeks ago about switching maintainer.

https://github.com/iKenndac/Tofu

2FAS

They only support iOS/iPadOS 16.4 or later.. no go for me

path: 0 1927046 10626355, hotness: undefined, score: 1, children: 0
10EXP 12 points 3 years ago

I was in the middle of switching 2FA over to Raivo from Apple Keychain and you drop this aaaaa-

path: 0 1928162, hotness: undefined, score: 12, children: 1
Milarepa_07 1 point 3 years ago

I was for a while contemplating myself to switch to Raivo from 2FA 😂. Now I’ll stay put. 😇

path: 0 1928162 2064105, hotness: undefined, score: 1, children: 0
Thief 12 points 3 years ago

The password manager for iphone or ios has mfa built in - seems to work ok. Its a bit annoying if you use a desktop thats not mac though and have to search for the mfa code among the millions of passwords.

path: 0 1926516, hotness: undefined, score: 12, children: 3
weedwhacking 10 points 3 years ago
path: 0 1926516 1927103, hotness: undefined, score: 10, children: 0
Milarepa_07 1 point 3 years ago

True but like someone else mentioned here it’s not the best having all eggs in the same basket. If for eggsample 🙂 the apple account gets compromised it’s going to be hard.

Check this video from techlore.

https://www.youtube.com/watch?v=25wG173PL3U

path: 0 1926516 2064331, hotness: undefined, score: 1, children: 1
PipedLinkBot 2 points 3 years ago path: 0 1926516 2064331 2064347, hotness: undefined, score: 2, children: 0
Supercharger 11 points 3 years ago

Why are people switching away from Raivo?

/c/outoftheloop

Edit: Looks like it's been bought by a generic app developer about which there are few details to be found: https://discuss.techlore.tech/...

path: 0 1929170, hotness: undefined, score: 11, children: 0
weedwhacking 8 points 3 years ago
path: 0 1927085, hotness: undefined, score: 8, children: 3
ANIMATEK 8 points 3 years ago

I’m not a big fan of putting all your eggs in one basket. If for whatever reason your Apple account gets compromised, you’re utterly fucked lol.

path: 0 1927085 1927673, hotness: undefined, score: 8, children: 2
weedwhacking 1 point 3 years ago
path: 0 1927085 1927673 1944357, hotness: undefined, score: 1, children: 1
weedwhacking 0 points 3 years ago
path: 0 1927085 1927673 1944357 1944364, hotness: undefined, score: 0, children: 0
DeflectedBullhorn 8 points 3 years ago

Edit: After digging into 2FAS, I think it is now my top choice. Seems like more of a drop in replacement for Raivo. https://2fas.com/

My second choice is (as of this edit) Owky. I’ve not seen anyone talking about it, but it’s FOSS and has the ability to export your TOTP codes.

Im a little worried about it not being maintained though, since it’s a single developer.

https://apps.apple.com/...

Other options I’ve considered:

Tofu Authenticator. Unfortunately it’s basic though and lacks the ability to export.

ente Authenticator. Account required, and I’m a little undecided on the company. Might be a serious option though.

path: 0 1927545, hotness: undefined, score: 8, children: 0
caglel 7 points 3 years ago

I use Authy. It has Apple Watch app for quick access.

path: 0 1927836, hotness: undefined, score: 7, children: 1
bluesydney 2 points 3 years ago

I have been using Authy as well. Works great in an apple ecosystem too.

Allows a quick copy from your phone to paste into computer browser when prompted for super easy usage.

path: 0 1927836 1930522, hotness: undefined, score: 2, children: 0
googlesnarfen 6 points 3 years ago

I‘m using Google Authenticator, but so far nobody else here seems to, am I doing it wrong??

path: 0 1933789, hotness: undefined, score: 6, children: 3
weedwhacking 5 points 3 years ago
path: 0 1933789 1944377, hotness: undefined, score: 5, children: 0
BrikoX 3 points 3 years ago

They make it hard to export your seeds if you want to move to the other platform or new device + closed source.

On Android Aegis is the great alternative. On iOS Raivo OTP used to be the main recommendation, but they just got bought by relatively unknown company, which is sketcy in on itself.

path: 0 1933789 1958765, hotness: undefined, score: 3, children: 0
LoopingRiver 1 point 3 years ago

I was going to ask the same question since I’m in the same boat.

path: 0 1933789 1944283, hotness: undefined, score: 1, children: 0
Gutless2615 6 points 3 years ago

Fan of OTP Auth

path: 0 1927381, hotness: undefined, score: 6, children: 0
TonyTonyChopper 5 points 3 years ago

So I'm not on iOS but... the websites I need to use for various work things all require that you use a specific authenticator. But they all choose a different random one. It drives me insane. I have 4 different apps. Google Authenticator, Authy, Duo Mobile, and Onelogin Protect. I pray I change jobs before I get a new phone.

path: 0 1936239, hotness: undefined, score: 5, children: 2
Senjutsu 1 point 3 years ago

Oh that's interesting. I know for my work, it says to use Google Authenticator, but I am still able to sign up with any app of my choice.

path: 0 1936239 1944578, hotness: undefined, score: 1, children: 0
DeflectedBullhorn 1 point 3 years ago

I realize there are exceptions to this, and you might fall into that category, but…

Most of the time when websites say they require a particular app, they actually don’t. Like if a website says to use Google Authenticator, you can actually use any TOTP app. There is even a workaround for using Steam’s TOTP without their app.

Don’t be scared to just try importing the QR or text based code into another app when you are signing up for a service. A functioning website won’t let you progress to the next screen without having the proper code in your app.

path: 0 1936239 2024945, hotness: undefined, score: 1, children: 0
kuroshido 5 points 3 years ago

I’m a fan of OTP Auth.

It’s been reliable, supports local and cloud backup / exporting, is simplistic in use and has a strong privacy policy.

path: 0 1927686, hotness: undefined, score: 5, children: 0
kennocha 4 points 3 years ago

I’m a fan of 1Password. Makes it easy to keep all my secrets in one place, behind a yubikey.

path: 0 1928130, hotness: undefined, score: 4, children: 1
navi 2 points 3 years ago

1Pass auto fill of 2FA is so OP on desktop.

I love the family sharing features as well.

path: 0 1928130 1934209, hotness: undefined, score: 2, children: 0
gogosempai 4 points 3 years ago

I have been using ProtonMail and Drive already so it was an easy decision to switch to Proton Pass when it came out. It's an all-in-one password manager which let's you store 2FA as well and also let's you make email aliases. It's synced everywhere, on Firefox on my linux desktop to my android phone to my iPad.

path: 0 1932146, hotness: undefined, score: 4, children: 0
SkaveRat 3 points 3 years ago

Totp with bitwarden. Such a nice integration

path: 0 1927804, hotness: undefined, score: 3, children: 0
mojo 3 points 3 years ago

I use Bitwarden for everything, including my totp codes. I should probably use a separate app solely for Bitwarden's totp code, but the danger of losing it all gives me such a rush!

path: 0 1988436, hotness: undefined, score: 3, children: 1
smalleng 1 point 3 years ago

You can write down your Bitwarden 2FA recovery codes and keep multiple copies of them in safe and private places

path: 0 1988436 2102546, hotness: undefined, score: 1, children: 0
relevantnanana 3 points 3 years ago

What happened to Raivo?

path: 0 1963789, hotness: undefined, score: 3, children: 1
kostel_thecreed 3 points 3 years ago

They got bought out by Mobime.

path: 0 1963789 1987491, hotness: undefined, score: 3, children: 0
matricaria 3 points 3 years ago

Apple Keychain OTP

path: 0 1933443, hotness: undefined, score: 3, children: 0
kryllic 3 points 3 years ago

I'm currently enjoying ProtonPass' built-in 2FA. You gotta be on a paid plan, however, but it's worth it imo.

path: 0 1988581, hotness: undefined, score: 3, children: 2
Probable5959 1 point 3 years ago

Where are you keeping the 2FA code for your proton account? (Supposing you have it set up)

path: 0 1988581 2020866, hotness: undefined, score: 1, children: 1
kryllic 1 point 3 years ago

I keep that one in my iCloud keychain just out of convenience

path: 0 1988581 2020866 2028229, hotness: undefined, score: 1, children: 0
om1k 3 points 3 years ago

I use keepassxc topt

path: 0 1927994, hotness: undefined, score: 3, children: 0
Cotillion189 2 points 3 years ago
path: 0 1927676, hotness: undefined, score: 2, children: 0
willya 2 points 3 years ago

None, just using the built in manager.

path: 0 1927525, hotness: undefined, score: 2, children: 0
IphtashuFitz 2 points 3 years ago

I’ve been using 1Password for years and love it. It’s multi-device support was one of the reasons I started using it, and now have a family subscription to share some things with my wife.

I rely on TOTP a lot for my IT job. With 1Password it’s easy to display them on my Apple Watch so I don’t need to keep opening the app on my phone or laptop.

path: 0 1936646, hotness: undefined, score: 2, children: 0
confetti_8tVST5 2 points 3 years ago
path: 0 1928008, hotness: undefined, score: 2, children: 0
porsche 2 points 3 years ago
path: 0 1960113, hotness: undefined, score: 2, children: 3
opt9 0 points 3 years ago

Recommending iCloud keychain in a privacy forum??

path: 0 1960113 1961946, hotness: undefined, score: 0, children: 2
teolan 1 point 3 years ago

It's actually pretty good security-wise, the main issue is that it completely locks you into the Apple ecosystem, while other 2FA apps and password managers are all cross-platform.

path: 0 1960113 1961946 1963083, hotness: undefined, score: 1, children: 1
opt9 1 point 3 years ago

Good security-wise, maybe. But who protects you from Apple? They have access to everything they so conveniently sync for you for free. That is neither secure nor private. The same goes for Google. People don't understand how much of your stuff they have access to.

path: 0 1960113 1961946 1963083 2101194, hotness: undefined, score: 1, children: 0
Plissken185 1 point 3 years ago

I’m currently in the process of switching to 2fas. It seemed the best available alternative for me.

path: 0 1945013, hotness: undefined, score: 1, children: 0
hellfire103 1 point 3 years ago

I like Tofu, and I also quite like Authenticator, but so far 2FAS seems to be the only option that offers backups without an account and that isn't a full-blown password manager.

path: 0 1930277, hotness: undefined, score: 1, children: 0
CarlCook 1 point 3 years ago

OTP Auth

path: 0 1929019, hotness: undefined, score: 1, children: 0
poring 1 point 3 years ago

I'll be using BitWarden as my 2FA app. I use KeePass as my password manager so it would still be two different services/apps.

I was planning on using Tofu but it has no FaceID which is mandatory IMO.

path: 0 2368064, hotness: undefined, score: 1, children: 0
sir_whocampsalot 1 point 3 years ago
path: 0 1929278, hotness: undefined, score: 1, children: 0
privacyfalcon9899 1 point 3 years ago

I am undecided btw 2FAS and Ente. 2FAS has an excellent UI, but there is no desktop app. Ente requires an account, but it’s not a problem considering that everything is E2EE and it’s a company with good reputation.

path: 0 1962063, hotness: undefined, score: 1, children: 0
ultratiem 1 point 3 years ago

The built in password manager and keychain can handle OTP since a few versions back.

path: 0 1941222, hotness: undefined, score: 1, children: 0
Max17 0 points 3 years ago

I’m using the microsoft Authenticator, is it bad?

path: 0 1931294, hotness: undefined, score: 0, children: 0
pineapplelover -7 points 3 years ago

I recommend Raivo or Tofu both open source and I believe you can save and export it somewhere else to backup.

path: 0 1927053, hotness: undefined, score: -7, children: 2
MagneticFusion 25 points 3 years ago
path: 0 1927053 1927071, hotness: undefined, score: 25, children: 1
nevernevermore 9 points 3 years ago

Hi, could you please recommend to me something that isn't x?

...

Have you tried x?

path: 0 1927053 1927071 1928917, hotness: undefined, score: 9, children: 0
privacyguides
privacyguides

@lemmy.one

login for more options
18764
647
3

In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.

This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.


You can subscribe to this community from any Kbin or Lemmy instance:

Learn more...


Check out our website at privacyguides.org before asking your questions here. We've tried answering the common questions and recommendations there!

Want to get involved? The website is open-source on GitHub, and your help would be appreciated!


This community is the "official" Privacy Guides community on Lemmy, which can be verified here. Other "Privacy Guides" communities on other Lemmy servers are not moderated by this team or associated with the website.


Moderation Rules:

  1. We prefer posting about open-source software whenever possible.
  2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, make a suggestion on our forum first.
  3. No soliciting engagement: Don't ask for upvotes, follows, etc.
  4. Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
  5. Be civil, no violence, hate speech. Assume people here are posting in good faith.
  6. Don't repost topics which have already been covered here.
  7. News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
  8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
  9. No help vampires: This is not a tech support subreddit, don't abuse our community's willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
  10. No misinformation: Extraordinary claims must be matched with evidence.
  11. Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
  12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.

Additional Resources:

go to feed...