No More Mr. Nice Guy: GitHub Demands Developers Use 2FA

thenewstack.io

1 point·CrankyBear··9 comments

You can plot this curve showing the rate at which people lose their 2FA codes and conclude that 2FA is a fad because by 2040 or so there will be no GitHub because everybody got locked out of their account.

The article suggests that users install Google Authenticator for 2FA, but I would suggest looking elsewhere. The developers pushed a change sometime within the last year where the app takes several seconds to respond when you first open it as well as when the codes refresh

I have recently switched to 2FAS (https://2fas.com/#) which has been much more responsive so far. I'm also interested in hearing if anyone has other recommendations

https://getaegis.app/

Aegis is open source. The tokens are encrypted at-rest. If you change devices, you can also export and import them.

Aegis looks like a good option. I'll take it for a spin. Thank you!

not to mentiom google app offers a way to recover your accounts! they store seed and private keys in their cloud.

I have nine accounts set up in GA and I've used it often for a few years. I've never seen any sort of behaviour like that.

A number of reviews mention the same slowness. I was also having it manage 29 accounts at its peak, though the slowdown came from an update, not from adding an account. I wonder if it depends on the version of Android or something

> in 2022, only a minority of GitHub users were using 2FA

This should be a red flag.

Hopefully the developers don't use T-Mobile...

Reply on news.ycombinator.com