They've moved the EOL date up from August 19 to March 19. 5 fucking months out of nowhere. It used to be that companies would give EOL warnings a year or so in advance, but now I'm seeing "you've got a week bozo GG" more and more.
this post was submitted on 13 Feb 2024
68 points (98.6% liked)
Technology
59161 readers
2115 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
Freeotp+ allows you to export your Codes só you can back them up or import them again
Aegis does as well. I haven't looked at freeotp but the feature I liked about Aegis is there is no sync or recovery feature vulnerable to simjacking, like Authy was.
I wonder when they'll improve the shit MFA they've got on their Sendgrid product... it was heavily tied to Authy.
Anyone know how to export everything out of Authy on Android? I feel the end is in sight
This is how I did it, using my Mac laptop. You can’t do it with the phone app, but a Mac or Windows computer can.
https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d958c93
You can't do it. Authy's FAQ page says it's for security reasons or whatever. I moved to Aegis a bit ago and had to do them one by one.
Unfortunately not.
Time to find a replacement, I guess.
I'd look for one that also does passwords. And passkeys too, since that's looking like it will replace TOTP.
Since like it or not you're going to have three credential systems to deal with, at least have all of them in one place.
Since like it or not you're going to have three credential systems to deal with, at least have all of them in one place.
Not the best idea for security
Bitwarden is by far the best answer. 👌👍
Keepass can do all, though TOTP support is not exactly what I'd call streamlined. Still works well nevertheless.
Edit: unsure of passkey when I think about it now, but worst case someone will make a plugin for them I guess...
My only issue with these tools is that you're putting both your passwords and the 2fa in one basket.
That is true, though you could keep your password and totp databases separate theoretically. I'm not sure if keeping them in say separate apps brings much benefit if your phone/pc gets compromised though, as most people would have both available on their device... totp is more about convince, it's never as secure as a hardware thing say yubikey.