[banonkiel]

Good day everyone.


If you use 2FA, you probably heard of or used Authy.

It's worth mentioning that when you try to enable 2FA, I believe it's recommended.
Link: https://hackforums.net/gauth.php


A week ago, my phone died and I had to get a replacement.
No problem, Authy already lives in the cloud so I only need to login and just like that I would have access to my codes, right?
Wrong.

- No matter what I did, it wouldn't send me the SMS/Phone verification to access my account.
- I didn't have another account logged in to use the "Approve login using another device"

I thought maybe Authy has a valid security reason not to allow me access, until I read about the same issue over and over on their sub-reddit.
https://www.reddit.com/r/twilio


To start with, Authy doesn't even allow you to export your codes.
Once they are added, that's it.
You can delete them, with 24h window as warning if you mistakenly triggered the deletion.


Finally, few days later I noticed there's an option (if you have Whatsapp set-up) to receive code to whatsapp instead of SMS/Phone verification.
I don't use WhatsApp, but sure. lets get it over with.

Successfully logged in, removed all 2FA from my accounts and started using another client (Ente Auth)
It has various ways to recover your account and you can export your security-codes if you want to migrate to another tool, which is the way it should be.



Screw Authy for making it too bothersome to migrate that people would avoid it.
I have read posts on Reddit about people having to disable codes for dozens of accounts and replacing them because of this.



So in the nicest way possible, fuck Twilio's Authy.
Thanks for reading, have a great day.

[Money-]

Twilo has been hacked multiple times and all. News been around Months ago or since years ago. Pretty much everyone moved from authy after hearing the news.

[DramaKing]

I knew that there were reasons for not using an app to login to accounts.

[banonkiel]

Twilo has been hacked multiple times and all. News been around Months ago or since years ago. Pretty much everyone moved from authy after hearing the news.

Heard about those, one of the reasons I decided to make the jump even though it's a freaking nightmare.

I knew that there were reasons for not using an app to login to accounts.

You don't log into the accounts using it.
You add an extra layer of security by having 2FA.

The concept is solid, Twilio's execution was just shit.

[Agent Shark]

Heard about those, one of the reasons I decided to make the jump even though it's a freaking nightmare.



You don't log into the accounts using it.
You add an extra layer of security by having 2FA.

The concept is solid, Twilio's execution is just shit.

Fixed your message. Much better.

[esimbuy.org]

Free Palastine !!!! my brother <3

[Regulus]

What's the best 2FA app to use except Authy?

[banonkiel]

What's the best 2FA app to use except Authy?

Anything that:
A) is Open Source
B) Allows you to export Security Tokens when needed.
C) Has enough security (i.e, encrypted data using private keys/words/etc)
D) Has multiple ways of recovery (i.e, Mail/phone/backup codes/etc)

Just my two cents.

[gwiz]

I hate Authy too, so many ads...

[banonkiel]

I hate Authy too, so many ads...

hate.. what...

I never had ads while using it, never knew it even had ads!

[Blazin]

Lots of good options. 2FAS, Ravio, Aegis Authenticator

[Charlie Sheen]

I hate authy. I switched to Google authenticator and it's much better.

[Epic]

You guys gotta get on Aegis or Ente Auth. They are fantastic.

[Deany]

I like authy I just wish they didn't abandon desktop version , good to have both

[banonkiel]

I like authy I just wish they didn't abandon desktop version , good to have both

Ente Auth has desktop version (and you can configure an lock as wel)

So far, I'm seeing all the good things Authy had in Ente without any of the bullshit.