Hacker News Reader

You do realise that with authy you're just registering TOTP stuff right? It's not on the same level as what you're mentioning. It's like complaining about having to use Firefox instead of google.com

View on HN

Because Cloudflare requires Authy, not TOTP. It's a pain in my ass because Cloudflare doesn't have sub-accounts and I have more than one person managing a Cloudflare account, but Authy is locked to one device. So as a result I can't turn on two-factor on my Cloudflare account.

Then why do they need an account or my phone number to do TOTP?

Yes, that's definitely unfortunate. I don't remember it being required with older versions of the Authy app. I really hate forced cloud service integration, especially in applications that deal with sensitive material.

they don't, but they want to have a way to verify who you are for things like the sync feature. Even if you don't want to use the feature.

This is a pretty good example of not doing something because it represents a minority and would make onboarding more difficult for their actual value-add.

Reply on news.ycombinator.com