I’m trying to move away from Authy since they’re ending support for their desktop app, and I thought Aegis would be the right app for me to jump to, but it doesn’t seem to have a desktop app. So I’m wondering what FOSS apps the rest of you use for Desktop and Mobile 2FA?

  • CeeBee@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    ·
    edit-2
    1 year ago

    I’m in the same boat. And I came across 2FAS (Android) (Website).

    It doesn’t have a dedicated desktop app, but it does have a browser extension, which I think is the best we’re going to get.

    I spent a fair amount of time looking around for an alternative when Authy announced they’re killing their desktop app. 2FAS is the best I found.

    If anyone else has a good suggestion, I’m all ears.

    My requirements:

    • Android App
    • Desktop App (Linux only)
    • Synchronization between the two
    • (not a hard requirement) FOSS, or at least just Open Source

    I’d be willing to pay for a decent solution.

    I didn’t realize it at the time, but Authy locks you in with no way to export your tokens. There are unofficial scripts on GitHub, but I haven’t tried them yet.

    Edit: specified Linux desktop. I don’t use Windows.

  • mholiv@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    2
    ·
    1 year ago

    Slightly off topic but desktop 2FA apps kind of kill the point of 2FA.

    2FA protects you by ensuring that even if your computer is compromised your account will have a layer of protection in that second factor “aka something you have”.

    If you have that on your desktop, you might as well not have it.

    If you find 2FA off of your desktop annoying I recommend looking into passkeys. Open standard and less annoying. Just not well supported.

    • KrapKake@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 year ago

      I’ve seen people say this, but what makes your phone so much safer than your computer?

      • mholiv@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        It’s the second factor that adds security. Aka “something you have”.

        If you use totp on your phone to log into an app on your phone yah it’s true it’s not much more secure (although I would argue app isolation does make it more secure) but using your phone to provide totp for your desktop proves that second factor.