Hacker News Reader

Comment by mfer | Hacker News Reader

What alternative are you using?

I migrated to Aegis a few months ago and would recommend it.

Exporting the configuration was a bit tricky, but I found a guide on GitHub: https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d...

Passkeys if the site supports them as a secure authenticator for 2FA/MFA (should pop up in your device if you try to setup a secure hardware authenticator on iphones and android) or TOTPs stored securely somewhere that isn't vendor locked.

I use https://github.com/tadfisher/pass-otp with pass, which has a FOSS client for desktop and smartphone (at least for andriod, no idea for ios)

It's built in to passforios

https://github.com/mssun/passforios

iCloud Keychain

Bitwarden

Is there an easy way to import from authy to bw? Or do I have to do one at a time.

Sorry I'm not sure.

The officially supported method is to login to each 2FA account and delete the old 2FA and generate a new one that you make sure to record separately. Authy really locks you in.

There are some unsupported methods a Google search away. I have had luck with this one in the past but haven't used in over a year, so can't vouch for it still working.

https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d...

I don't really like the idea of TOTP and passwords in the same place. If it gets compromised someone has both your password and TOTP code.

Yep I agree so I use 1Password only for passwords and Bitwarden only for TOTP.

I use Bitwarden for passwords only. I use Authy for the TOTP, although I should use something else.

I backup my TOTP seeds in KeepassXC. I also have an offline backup of my Bitwarden vault that is in a separate KeePassXC vault. I agree that I don't like the idea of one vault holding both bits of info.

Reply on news.ycombinator.com