Hacker News Reader

Comment by MayeulC | Hacker News Reader

I used to use andOTP, mainly because it was possible to export OTP tokens when upgrading or resetting my phone.

Then IIRC I heard that andOTP wasn't that secure/maintained. Or maybe that their backup file encryption wasn't that great. I am not sure about these claims, but I migrated to Aegis, that could nicely import AndOTP tokens.

Nowadays, I use it in combination with bitwarden (it supports OTP), which I use for my less important accounts. Bitwarden (self-hosted with bitwarden-rs) allows me to generate those without my phone. I still keep every token in Aegis as well.

AndOTP features I miss with Aegis:

- Icon library for common websites using OTP

- Maybe Steam OTP support? I never used it though, since it would more or less lock me out of trading, without the app, so I use e-mail.

View on HN

Icon packs are coming. [1] Steam accounts can be imported if you have root access, or you can try [2].

IIRC Steam codes are almost standard except they use a different encoding because... Valve likes to roll their own stuff (?). I agree that trading makes only having codes a bit less useful. They could've used the same codes to confirm trades instead of an entirely separate interface.

[1] https://github.com/beemdevelopment/Aegis/issues/509

[2] https://github.com/beemdevelopment/Aegis/wiki/Adding-Steam-t...

Thanks for pointing this out.

Yeah, steam rolling their own stuff is a bit troublesome at ties, but I think they were among the first to use TOTP tokens, IIRC ? There was a story here the other day on how they roll their own password encryption over HTTPS for logging in... It's a shame they don't use standard authentication mechanisms, though.

And I should clarify: my yubikey is my main 2FA token, though support for U2F/Webauthn is a bit limited.

One of the authors here.

> Icon library for common websites using OTP

Someone from the community is maintaining an icon pack for Aegis: https://github.com/aegis-icons/aegis-icons. We're currently working on making icon packs easier to use in Aegis, see: https://github.com/beemdevelopment/Aegis/issues/509.

> Maybe Steam OTP support

Steam is supported, actually! But like you said, you'd still need the Steam app if you're doing trading.

Hey there, thanks for Aegis, it is my main OTP vault for important suff.

Thank you and your sibling comment. I'm glad this is being worked on! Discovery is also important IMO, so a one-tap install of the most widely used icon pack would be nice to have too :)

Thanks for your support! That's a fair point. We'll see what the feedback is like when we release initial support for icons packs and decide whether to include a pack out of the box after that.

> I migrated to Aegis, that could nicely import AndOTP tokens.

Thanks. I use andOTP too and was hoping this point was answered somewhere here :-).

Oh, perhaps I should also mention that Aegis can easily display OTP secrets that can be pasted into Bitwarden.

You can also display Qr codes to easily export a select few to another authenticator app.

Not sure about Aegis -> AndOTP? Aegis can export txt and json, as well as its own encrypted format.

It works together with icon packs you installed as an app. I use Whicons, it has lovely monochrome icons for most sites I use.

Reply on news.ycombinator.com