Twilio kills off Authy for desktop, forcibly logs out all users

Comments

• conciselyverbose@sh.itjust.works ⁨3⁩ ⁨months⁩ ago

  However, those who synced their desktop apps with the mobile versions have discovered that some of their tokens did not correctly synchronize, making their associate accounts inaccessible.

  Lol

  source

  • specialseaweed@sh.itjust.works ⁨3⁩ ⁨months⁩ ago

    Fuck that man.

    source

    • conciselyverbose@sh.itjust.works ⁨3⁩ ⁨months⁩ ago

      Yeah, laughing at the customers (who were making a good decision to make sure they had 2FA enabled) is kind of a dick move.

      But from the perspective of the company fucking up that bad it’s funny.

      source

      • -> View More Comments
• _edge@discuss.tchncs.de ⁨3⁩ ⁨months⁩ ago

  I hope you all freed your 2fa secrets from this un-service.

  source

  • fne8w2ah@lemmy.world ⁨3⁩ ⁨months⁩ ago

    I did when the news first broke.

    source

    • net00@lemm.ee ⁨3⁩ ⁨months⁩ ago

      I did that when they leaked my phone number to hackers, as happened to other millions of users. Using authy is a security threat

      source
• Boozilla@lemmy.world ⁨3⁩ ⁨months⁩ ago

  What are some good multi-platform alternatives/ replacements?

  source

  • PatrickYaa@lemmy.one ⁨3⁩ ⁨months⁩ ago

    I switched to Aegis

    source

    • beejjorgensen@lemmy.sdf.org ⁨3⁩ ⁨months⁩ ago

      I switched to Aegis when google authenticator didn’t allow exports. It’s simple and it works.

      source

      • -> View More Comments
  • fart_pickle@lemmy.world ⁨3⁩ ⁨months⁩ ago

    Bitwarden or Proton Pass.

    source
  • mosiacmango@lemm.ee ⁨3⁩ ⁨months⁩ ago

    Keepass. Standalone apps for desktop/phone. Passwords are in small encrypted db file you can copy/paste anywhere you need it.

    Use something like syncthing/nextcloud/onedrive to keep the file in sync across devices.

    source
  • Eezyville@sh.itjust.works ⁨3⁩ ⁨months⁩ ago

    I use KeePassXC and a Yubikey 5. You can store a certain number of 2fa on the key but i also back up the secret key and recovery codes on KeePassXC which is backed up on my Nextcloud. When using the Yubikey there is an app on desktop and mobile that reads they key but doesn’t store the codes. Open the app, plug in the key, the TOTP appears, take the key out and the TOTP is gone.

    source
  • freecloudgal@discuss.tchncs.de ⁨3⁩ ⁨months⁩ ago

    Duo, Aegis, Bitwarden, Proton.

    source
  • BakedCatboy@lemmy.ml ⁨3⁩ ⁨months⁩ ago

    I like using bitwarden, the vaultwarden server stores it with passwords and makes codes available in the app / browser extension. I also keep them backed up on a nas and synced off-site just in case.

    source
  • kolorafa@lemmy.world ⁨3⁩ ⁨months⁩ ago

    andOTP + bitwarden for me

    source

    • mosiacmango@lemm.ee ⁨3⁩ ⁨months⁩ ago

      AndOTP is great. Simple and easy encrypted backups. I love how its timer counts down, not up like some others and highlights the token in red so you know you need to hustle or wait.

      source
  • Damage@feddit.it ⁨3⁩ ⁨months⁩ ago

    I switched to Ente Auth some time ago when bad news about authy started getting out

    source
  • Fubarberry@sopuli.xyz ⁨3⁩ ⁨months⁩ ago

    A lot of password managers support 2fa now. I use Enpass because I got a lifetime license a long time ago (it’s also available to people with Google Play pass), but I know some other popular options have it too.

    source

    • BorgDrone@lemmy.one ⁨3⁩ ⁨months⁩ ago

      The whole point of 2FA is to keep the second factor separate from the first. If you store both in the same password manager app that defeats the entire point of 2FA.

      source

      • -> View More Comments
• gedaliyah@lemmy.world ⁨3⁩ ⁨months⁩ ago

  I used Authy a couple years ago, do I need to be worried?

  source

  • PlutoniumAcid@lemmy.world ⁨3⁩ ⁨months⁩ ago

    Only if you use it currently. Otherwise no worries.

    source
• 9tr6gyp3@lemmy.world ⁨3⁩ ⁨months⁩ ago

  Whoa

  source