Ente-io-auth: open-source 2FA app for Android, iOS and web | Hacker News Reader

Ente-io-auth: open-source 2FA app for Android, iOS and web

github.com

17 pointsthunderbong8 comments

Hey, one of the devs behind the project here. We were planning to do a Show HN sometime later, but thanks to OP for sharing this (and saving us from perpetual procrastination).

We've been building Auth for almost a year now. It started off as a pet project to cure our own itch. At the point, we couldn't find a cross platform open source app that offered e2ee backups. Once we had an MVP, we released the project to our community[1], who responded favorably, and with their help the project has matured to where it is now.

If you've any feedback or questions do let us know!

[1]: https://ente.io/community

Hi. I'm not an expert, but should I be concerned that I'd be offloading my auth tokens to a cloud service?

Security breaches and so on.

Hey, all of your tokens are encrypted with a key, that only you have access to. So in the case of a security breach, the attacker would only be able to access encrypted data.

Our architecture[1] is similar to that of password managers, and we've been externally audited[2].

[1]: https://ente.io/architecture

[2]: https://ente.io/blog/cryptography-audit/

Pretty cool.

My only concern is long term, how do you plan to support web storage/use without monetization of some sort?

Our primary source of income is our cloud for photos[1]. Storage and bandwidth consumed by 2FA secrets is minuscule in comparison.

Also, Auth has helped spread word about Photos, and we're very pleased with this side effect.

[1]: https://ente.io

Needs an import from bitwarden.

Hey, thanks for the feedback, this is already on our roadmap: https://github.com/ente-io/auth/issues/222

really cool.

I have always been wondering for an open-source protocol for 2FA. Some of my 2FAs are in Authy, some in G Authenticator. Shouldn't there be one identity that can fetch all your 2FA from across providers?

Reply on news.ycombinator.com