Hacker News Reader

Comment by gravitas | Hacker News Reader

A little bit ago in another HN article (https://news.ycombinator.com/item?id=20232164) where AndOTP popped up, a link was shared with a nice discourse between the AndOTP author and a newer one, Aegis:

https://old.reddit.com/r/androidapps/comments/b45zrj/dev_aeg...

AndOTP isn't seeing a lot of development, but Aegis is moving like gangbusters and recently passed the 1.0 mark. Thanks to that HN trail of info, I've switched from AndOTP to Aegis:

https://github.com/beemdevelopment/Aegis

The Aegis devs have been doing a bang up job and the app is worth a look, it can import your AndOTP (and other apps) data. This is not a slight against AndOTP, just what I personally see as a natural progression based on that reddit thread above.

View on HN

Thank you for this recommendation. Just tried Aegis on Android:

1. Its UX is more polished than andOTP; the AMOLED theme in particular is well done.

2. It also supports fingerprint unlocking, the lack of which was the biggest pain point when regularly using andOTP.

3. Supports imports from popular 2FA apps, though this requires root access.

A few issues I noticed:

1. While importing from andOTP, the issuer is blank when the 2FA token was manually added to andOTP. So now I have a list of 2FA codes with no indication as to which website they belong to. [Screenshot](https://gopi.dev/images/aegis.jpg)

2. The 'Vault is unlocked' notification persists even on closing the app.

3. OpenPGP integration for backups isn't available.

For issue #1 - try going into settings and enabling Account Name, I believe it's off by default. I, like you, had to edit each entry after import; Aegis has multiple metadata fields and I think the old data imports into the (not visible) Account field if I recall my experience correctly.

This (issuer saved in account name field) is what I got when I just imported my andOTP data. If you long-press and edit an entry, you can see and change both fields.

Perfect, thanks for this.

One of the Aegis developers here. Thanks for the feedback. Could you create an issue on GitHub for #2? I'm curious to know if you killed the app or just minimized it.

Ah my bad, looks like it only happens when I kill the app and not when I exit the app properly. I do not know if android apps are supposed to clean up persistent notifications when they are killed or even if they can.

I use fingerprint unlocking with andOTP just fine (for a while now too). Not sure why it wouldn't work for you.

I'm using 'Password/PIN' for database encryption and it isn't compatible with 'Device Credentials' in authentication method. Can you tell me how you've enable fingerprint unlocking?

Reply on news.ycombinator.com