Conversation

Notices

1. Darnell Clayton :verified: (darnell@one.darnell.one)'s status on Saturday, 30-Jul-2022 23:24:49 UTC Darnell Clayton :verified:

   Also I am trying to reduce the number of sites that I use Google Authenticator app with. If you ever swap phones it’s a hassle to access your account again.

   • Bernie (codewiz@mstdn.io)'s status on Saturday, 30-Jul-2022 23:23:53 UTC Bernie

     in reply to

     @darnell Yes, Google Authenticator sucks, but 2FA is a standard so you don't have to use it even for a Google account.

     I've been using andOTP for several years and I'm very happy both with the UI and the secure backup/restore features:
     https://github.com/andOTP/andOTP#andotp----android-otp-authenticator
     #andotp #android #security

   • Bernie (codewiz@mstdn.io)'s status on Sunday, 31-Jul-2022 00:00:13 UTC Bernie

     in reply to

     • 🇺🇦 Jonathan Treffler 🐧

     @JonathanTreffler @darnell I use Yubikeys too, but not all websites support FIDO2.

     And even those who do, often don't let you enroll multiple dongles (I have 3).

   • 🇺🇦 Jonathan Treffler 🐧 (jonathantreffler@gruene.social)'s status on Sunday, 31-Jul-2022 00:00:42 UTC 🇺🇦 Jonathan Treffler 🐧

     in reply to

     • Bernie

     @darnell @codewiz

     Another option is to switch to a hardware 2FA device, that you can put on your keychain.
     I find it both the easiest and most convenient to use and it is by far the most secure 2FA method.
     (I use a YubiKey https://www.yubico.com)

   • Darnell Clayton :verified: (darnell@one.darnell.one)'s status on Sunday, 31-Jul-2022 00:00:45 UTC Darnell Clayton :verified:

     in reply to

     • Bernie

     @codewiz Thanks! If I ever buy an Android phone that will be blessing. Many sites now present me with the option of sending an SMS, using email or (the smart ones) realize I am using multiple mobile devices & will have me confirm via push notification on one of those (iPhone, iPad or Apple Watch).

     However, there are a few that were a nightmare to navigate around, & I had to have tech support disable the Authenticator login after swapped phones.

   • Bernie (codewiz@mstdn.io)'s status on Sunday, 31-Jul-2022 00:36:19 UTC Bernie

     in reply to

     • 🇺🇦 Jonathan Treffler 🐧

     @darnell @JonathanTreffler Yubikeys are quite expensive... I don't understand why nobody undercuts them by selling an equivalent product for $5.

   • Darnell Clayton :verified: (darnell@one.darnell.one)'s status on Sunday, 31-Jul-2022 00:36:25 UTC Darnell Clayton :verified:

     in reply to

     • Bernie
     • 🇺🇦 Jonathan Treffler 🐧

     @JonathanTreffler @codewiz I remember Google trying to sell these to me but at the time the places I needed them were beyond my control (other services that I use). My job also uses them but they only hand them to certain individuals.