+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: The Lounge (https://hackforums.net/forumdisplay.php?fid=25)
+---- Thread: Using Authy Desktop - is it a bad idea? (/showthread.php?tid=5962415)
Pages: Pages
1
2
Using Authy Desktop - is it a bad idea? - James Burnham - Apr 20, 2019
I switched to Authy Desktop because it is more convenient than using the mobile app, but I am not sure whether this is a good idea securitywise. What Authy do you use? Mobile or Desktop?
RE: Using Authy Desktop - is it a bad idea? - SIM-3257834 - Apr 20, 2019
Mobile because I'd rather have my two devices stay separated. Just in case of unauthorized entry.
RE: Using Authy Desktop - is it a bad idea? - PerfectStorm - Apr 20, 2019
I currently use it for my 2FA never had a problem with it. Suggest you use it on phone and desktop incase you lose one.
RE: Using Authy Desktop - is it a bad idea? - Dorrance - Apr 20, 2019
I feel if you use desktop you are more vulnerable
RE: Using Authy Desktop - is it a bad idea? - PerfectStorm - Apr 20, 2019
(Apr 20, 2019 09:36 PM)Dorrance Wrote: I feel if you use desktop you are more vulnerable
Why would you assume that? they are both the same concepts.
RE: Using Authy Desktop - is it a bad idea? - Dorrance - Apr 20, 2019
(Apr 20, 2019 09:37 PM)PerfectStorm Wrote: Why would you assume that? they are both the same concepts.
Both concepts but I have heard stories and almost been one of those victims who had there BTC stoke
RE: Using Authy Desktop - is it a bad idea? - PerfectStorm - Apr 20, 2019
(Apr 20, 2019 09:54 PM)Dorrance Wrote: Both concepts but I have heard stories and almost been one of those victims who had there BTC stoke
Had your BTC stolen because of authy not working? how do you mean
RE: Using Authy Desktop - is it a bad idea? - Dorrance - Apr 20, 2019
(Apr 20, 2019 09:55 PM)PerfectStorm Wrote: Had your BTC stolen because of authy not working? how do you mean
Someone almost got into it, is what I’m saying.
RE: Using Authy Desktop - is it a bad idea? - PerfectStorm - Apr 20, 2019
(Apr 20, 2019 10:01 PM)Dorrance Wrote: Someone almost got into it, is what I’m saying.
Hmm close call. I never had that sort of thing happen.
I did have one of those clipboard switchers infected once.
RE: Using Authy Desktop - is it a bad idea? - Prince™ - Apr 20, 2019
Mobile imho is the better device in terms of security concerns.
RE: Using Authy Desktop - is it a bad idea? - Banana - Apr 20, 2019
use mobile if u want to be more secure otherwise just use desktop
RE: Using Authy Desktop - is it a bad idea? - Mr. Robot - Apr 20, 2019
Don't use it on desktop 100% - new windows exploits daily and all it takes is for them to watch.
RE: Using Authy Desktop - is it a bad idea? - James Burnham - Apr 20, 2019
Yeah, but I can use a master password to encrypt Authy. Plus, if I were to get ratted, the hacker could just steal the cookies and login anyway.
"If there is local malware on your computer it doesn’t really matter wether you are using 2 separate devices to log in with two-factor authentication. To illustrate the threat, lets take a look at the following authentication scenario where the user uses a RSA Hardware Token and see why even in this scenario, two-factor authentication cannot prevent the attacker from gaining access to your account.
![[Image: chrome-diagram-768x355.png]](https://authy.com/wp-content/uploads/chrome-diagram-768x355.png)
Once you successfully log in to a site, your browser locally stores a unique identifier for your session, called a session cookie. This cookie is then used to inform the site on subsequent requests that you have already authenticated, so that the site doesn’t ask you to log in again. What this basically means is that there’s no point for the malware to steal your credentials or two-factor token when it can simply steal your authenticated sessions."
https://authy.com/blog/introducing-authy-for-your-personal-computer/
RE: Using Authy Desktop - is it a bad idea? - ๖ۣۜApocalypse - Apr 20, 2019
Just create a virtual machine and use it for the desktop app, if u are concerned about security.
Keep in mind the idea of using authy, you get both mobile and desktop as a backup option.
RE: Using Authy Desktop - is it a bad idea? - Bossk - Apr 21, 2019
You save maximum 20 seconds doing this, stick to mobile.