If proprietary app is better and more robust I am willing to try it and assess it myself.
Aegis authenticator. Beats all proprietary apps I’ve tried so far
I’m leaving links here in case anyone needs them
It supports importing data from various 2FA apps and even allows you to generate Steamguard codes.
Steamguard? Since when? That’s awesome!
I honestly don’t know. I set it up with steamguard-cli few months ago and it’s working like a charm.
Nothing to worry about when doing that? I’d love to have Valve support 3rd party 2FA apps officially, but oh well
Yep, it works perfectly
Bitwarden has it too, but eggs in one basket etc.
One of those apps that just does its job, does it well and I never have to worry about it
Thank you!
I’d been a happy user of andOTP for many years, unaware until now that it had been abandoned and that I therefore needed ro replace it. I looked through the recommendations posted here and came to the conclusion that Aegis indeed was the best recommendation.
Migrating from andOTP to Aegis by exporting an encrypted backup file from andOTP to the local filesystem and importing it in Aegis worked flawlessly.
One thing that I really liked in andOTP that Aegis doesn’t have was the PGP export, it was just very nice to get encrypted backup files that I could decrypt directly using standard software that I already have and know how to use, entirely independent from any particular app. Aegis instead provides the decrypt.py script to decode and decrypt its own encrypted backup file format and while I’ve tested and verified that this works fine, simply using standard PGP was nicer.
But that’s a minor detail. All in all, Aegis seems to do everything I need, and does it well.
Aegis
aegis
Aegis is a great Foss totp app
Aegis on mobile and keepassxc on desktop.
What’s the difference between keepassxc and the regular keepass?
KeepassXC is multiplatform. (Also: KeepassDX is quite nice as an an Android app for Keepass databases.)
I wouldn’t put my 2FA in password storage. Just in case
Authenticator Pro
Yes! I moved from aegis to it and it is much better imo.
deleted by creator
Better way to select groups. Nicer looks, more customization.
Thank you for the information. I am using Aegis and will not move away from it – I have no reason to. I am completely content with the features it provides. However, I want to look at Authenticator Pro to see how it works, what features it brings and in general, how good the application is. If I like what I see, I will be able to provide an alternative to Aegis when I suggest a TOTP application for someone. I hope Authenticator Pro is great, so I can recommend it with confidence.
That’s how I started too. I used Aegis for almost two years. Then I found out about Authenticator Pro and decided to give it a try. The nice thing is that it can import an Aegis export file, so it’s easy to get started. Give it a try and see if you like it.
WearOS support!
I’ve used it for years for numerous phones. it’s the best. Link for the lazy
https://apt.izzysoft.de/fdroid/index/apk/me.jmh.authenticatorpro
I love that you can back it up with a file… thatway i can put it somewhere safe and can recover my logins after my phone breaks
This! I don’t even have to pick up my phone… I just check the code on my smartwatch. Awesome!
I’d suggest the following
The really important step is to make sure to export and backup your 2FA codes in a safe place.
You don’t want to be left in the mud because you lost or wiped your phone that contains the only method to get into your important accounts.
For me FreeOTP+ on fdroid is all I need. Its simple and just works.
BitWarden.
I don’t think that it’s safe to leave both authentication factors in a single app.
It depends on your risk profile, but yes, it’s less secure. For some people the convenience is worth the risk, for others maybe not. If you opt to store 2fa keys in Bitwarden you’d definitely want to enable 2fa for your Bitwarden account though, which brings us back to the same issue again.
If you opt to store 2fa keys in Bitwarden you’d definitely want to enable 2fa for your Bitwarden account though, which brings us back to the same issue again.
With the risk of getting locked out if all your devices get logged out of Bitwarden! 🙈
To clarify, you’d want to enable 2fa for Bitwarden and store the token for that in a different authenticator app - that way you can still log in to Bitwarden without already needing to be logged in
Why not? If you enable 2fa, chance that you’ll save the recovery/emergency code in your password manager anyway (I don’t think people would really write them down on a piece of paper and put them in their safe). Why use a separate authenticator app if your password manager can handle it all?
chance that you’ll save the recovery/emergency code in your password manager
You’re absolutely right about this and I need to find a solution.
Why use a separate authenticator app if your password manager can handle it all?
What if you get logged out from Bitwarden on all the devices? How can you get back in Bitwarden if you have 2FA enabled on that service? (And I hope that you do!)
Believe it or not, I save my bitwarden 2FA on bitwarden too! I also save it on google authenticator, so I have it on two places. The reason I save it on bitwarden is to prevent losing access to the token if I lost my phone, because bitwarden allow you to unlock the vault without OPT on a know device/computer (it only ask for OTP when you login from a new device). So as long as I have one device with bitwarden, I should still be able to unlock the vault and re-login on a new phone using 2FA token from bitwarden on the other device. If I lost all my devices, then I’ll have to dig the recovery code I hid and encrypted somewhere on my google account and my primary desktop, which is quite a pain so I hope I don’t need to do this.
Beware that for important bug/problem/I don’t know, you could be logged out from all your devices for security reason and in that case you can login only with 2FA even on devices where you were already logged in. Keep in mind that Aegis can create encrypted backups, but you’ll have to upload them somewhere and I understand that with Bitwarden is easier.
Well, as long as I don’t lose the phone with Google authenticator, I should still be able to login to bitwarden without digging out the recovery code.
This. It’s not two factor if both factors are stored together lol
deleted by creator
Aegis
I personally use KeePassXC (KeePassDX on android), it can have TOTP code generation for 2FA for any service. And since it’s a password manager, it’s secured by a master password.
FreeOTP+ from fdroid is what I’m using.
Me as well!
Aegis is my favorite.
aegis is great, but 2fas has Google Drive sync and a browser extension.
lack of sync is a dealbreaker for me.Aegis, FreeOTP
