Hacker News new | ask | show | jobs
by angst_ridden 1924 days ago
The difficulty there is evaluating which ones are reliable, secure, and easy to use. I'd welcome recommendations.
5 comments

I personally use andOTP [0] which I'm a fan of. I've been thinking of switching to aegis [1] for nothing more than a UI change.

[0]https://github.com/andOTP/andOTP

[1]https://github.com/beemdevelopment/Aegis

I never had any issues with andOTP. It worked even when some websites specifically asked for a different app.
The integrated TOTP in 1Password is pretty good, it can grab the QR code off the screen and everything.

https://support.1password.com/one-time-passwords/

Just be careful with these solutions, I use the one in Bitwarden for a few things and while great for convenience, there's a significant security tradeoff when you go ahead and load all your TOTP tokens into memory on the same machine you keep the passwords on. Turns your 2 factor authentication into single factor pretty fast against even a decent piece of malware, let alone a dedicated attacker.
Microsoft Authenticator is good, and there’s a reasonable chance they already use it at work.
Google Authenticator seems fine?
Google Authenticator ?