• @[email protected]
    link
    fedilink
    English
    1092 months ago

    Companies need to stop using Authy. It’s stupid and pointless when we have a open alternative such as the one used by Google Authenticator or Aegis.

    • @TheEighthDoctor
      link
      English
      432 months ago

      I started using Authy instead of GA because every time I changed the ROM on my phone I would lose all codes, because I would forget every time.

      • @[email protected]
        link
        fedilink
        English
        492 months ago

        Use aegis, export the keys and then reimport them every time you switch. Trusting your second factor to a cloud is a disaster waiting to happen.

        If you want to get fancy setup your own cloud server (nextcloud, Seafile, owncloud etc) and set the backup folder for aegis to the self hosted cloud for easy restore every time you switch ROMs.

        • @[email protected]
          link
          fedilink
          English
          12 months ago

          Simpler approach: auto export from aegis when an update occurs, syncthing or similar to your home PC. I have it synced across several computer in different locations and aegis is good enough to make unique filenames, combine with syncthing file history and I’m good for like 2 years of backups.

        • @[email protected]
          link
          fedilink
          English
          22 months ago

          They had an obvious solution which is export to an encrypted text files and went with the option that lowers your security

          • @[email protected]
            link
            fedilink
            English
            22 months ago

            Google usually goes with the lowest common denominator solution. There is a staggering amount of people who don’t know what is a file, let alone that phones have any.

      • @I_Clean_Here
        link
        English
        62 months ago

        This isn’t about you and your silly follies

      • @[email protected]
        link
        fedilink
        English
        22 months ago

        I’ve started putting mine into my Bitwarden vault as well as Google auth, mainly because I’m a bit paranoid I’ll wind up locked out of something by trusting a second factor too much

        • @Coreidan
          link
          English
          02 months ago

          With password recovery you shouldn’t be getting locked out of anything. I don’t see this being a risk.

          • @[email protected]
            link
            fedilink
            English
            22 months ago

            Password recovery is itself a weakness in the system

            And I did call myself paranoid for it…

    • @iamericandre
      link
      English
      212 months ago

      Call my job and tell them this please. I have to use this shite everyday and it sucks.

    • lazynooblet
      link
      fedilink
      English
      172 months ago

      I expect most usage of authy was based on the open TOTP protocol that Google etc use. The additional benefit was backing up those codes to the authy account, hence the avenue of attack on those accounts.

      I agree though, Authy, especially since it was bought out, should be avoided. They deprecated their desktop app which was the only semi useful part of their suite, but I stopped using it years ago.