Hacker News Reader

It's not quick, but you can submit a GDPR/Subject Access Request to Twilio and after a month or two they will send you all your Authy TOTP seeds.

Then you can import them into Aegis or some other FLOSS solution: https://github.com/uiltondutra/authy-migrate

That is alarming. They have access to the plaintext? And they will hand auth secrets out? That seems extremely wrong to me.

They always had access to the plaintext, they could do better to hand them out

>...data arrives as a CSV in which every token is encrypted with your backup password...

Fair enough. That seems reasonable.

So there is a real solution to that problem! Thanks a lot for sharing it