[James Burnham]

I switched to Authy Desktop because it is more convenient than using the mobile app, but I am not sure whether this is a good idea securitywise. What Authy do you use? Mobile or Desktop?

[SIM-3257834]

Mobile because I'd rather have my two devices stay separated. Just in case of unauthorized entry.

[PerfectStorm]

I currently use it for my 2FA never had a problem with it. Suggest you use it on phone and desktop incase you lose one.

[Dorrance]

I feel if you use desktop you are more vulnerable

[PerfectStorm]

I feel if you use desktop you are more vulnerable

Why would you assume that? they are both the same concepts.

[Dorrance]

Why would you assume that? they are both the same concepts.

Both concepts but I have heard stories and almost been one of those victims who had there BTC stoke

[PerfectStorm]

Both concepts but I have heard stories and almost been one of those victims who had there BTC stoke

Had your BTC stolen because of authy not working? how do you mean

[Dorrance]

Had your BTC stolen because of authy not working? how do you mean

Someone almost got into it, is what I’m saying.

[PerfectStorm]

Someone almost got into it, is what I’m saying.

Hmm close call. I never had that sort of thing happen.

I did have one of those clipboard switchers infected once.

[Prince™]

Mobile imho is the better device in terms of security concerns.

[Banana]

use mobile if u want to be more secure otherwise just use desktop

[Mr. Robot]

Don't use it on desktop 100% - new windows exploits daily and all it takes is for them to watch.

[James Burnham]

Yeah, but I can use a master password to encrypt Authy. Plus, if I were to get ratted, the hacker could just steal the cookies and login anyway.

"If there is local malware on your computer it doesn’t really matter wether you are using 2 separate devices to log in with two-factor authentication. To illustrate the threat, lets take a look at the following authentication scenario where the user uses a RSA Hardware Token and see why even in this scenario, two-factor authentication cannot prevent the attacker from gaining access to your account.



Once you successfully log in to a site, your browser locally stores a unique identifier for your session, called a session cookie. This cookie is then used to inform the site on subsequent requests that you have already authenticated, so that the site doesn’t ask you to log in again. What this basically means is that there’s no point for the malware to steal your credentials or two-factor token when it can simply steal your authenticated sessions."

https://authy.com/blog/introducing-authy...-computer/

[๖ۣۜApocalypse]

Just create a virtual machine and use it for the desktop app, if u are concerned about security.

Keep in mind the idea of using authy, you get both mobile and desktop as a backup option.

[Bossk]

You save maximum 20 seconds doing this, stick to mobile.