Comment

Comment on 2FA app

westingham@kbin.social ⁨1⁩ ⁨year⁩ ago

I'm out of the loop, why is Authy being owned by Twilio a bad thing?

Sort:hotnew top

Harrison@infosec.pub ⁨1⁩ ⁨year⁩ ago
It’s less that Twilio specifically owns it than problems resulting from corporate ownership. Briefly:

You can’t get your data out of Authy. Actually you can, but it’s a long annoying process involving installing an out of date chrome extension and using developer tools.

Privacy issues. Authy links a lot of data including location to your identity.

Authy supports SMS account recovery (which is inherently insecure) and doesn’t allow users to disable it.
source