Hacker News new | ask | show | jobs
by ABS 1690 days ago
FWIW I've been using Authy for all my 2FA for years, including Google's, without any issues
1 comments

And authy has a desktop app too, which makes it much more convenient.
The whole point of 2FA is that 2 devices need to be compromised - your phone AND your computer. With desktop Authy only one device - your computer - needs to be compromised.
This is correct but, in the vast majority of cases, attacks are carried out remotely. I would agree that where third parties have access to your machine, it would be not be a good solution.
If someone controls your computer remotely, it's the same as if she controlled it physically, no difference from pownership point of view.
Authy desktop app doesn't show some entries for me though. Dunno why