Hey, I need to move one day of Google Authenticator, and I was wondering if their was a project like Bitwarden for 2 Factor Authentication
Take care!
You must log in or # to comment.
Aegis Authenticator for Android: https://getaegis.app/
Raivo OTP for iOS: https://raivo-otp.com/
2FAS however is cross-plataform, open source, and what I’m using right now: https://2fas.com/
Been using Aegis for a couple years and love it
I’ve been using Raivo OTP on my iPhone. 2FAS sounds interesting though as it’s cross-platform!
I’ve been using it for the past month and I have nothing but good things to say about it.
With the extension on the browser on my laptop it’s even better, because I just click the extension and accept the request on my phone. No need to manually write the TOTP.
Bitwarden has TOTP included as a feature. Seems like lots of people don’t like using it though, and see storing the 2FA keys with the passwords as “putting all your eggs in one basket”.
Aegis seems to be the open source 2FA app of choice for privacy-minded people right now.
Wow, the program that keeps on giving, I’m surprised, I just checked, and I think I’m going to move my 2FA to Bitwarden
I use bitwarden for the bulk of my 2fas and aegis for the 2fa for bitwarden itself and a couple other sensitive/important sites that I want separated. Be sure to back up your 2fas somehow for bitwarden.
Bitwarden provides a facility for MFA. Though there’s an argument to be made against eggs + baskets. It might defeat threw purpose a bit.
I use Aegis which is opensource and easily encrypted and backed up locally. Saved my ass where I accidentally deleted my 2FA for Bitwarden, thus locking me out in circle of shite. Aegis allowed me to roll back and pull in that one missing key without having to redo a load i’d made since the last backup and all was good.
Yea, I think everyone that is saying Bitwarden supports 2FA is missing the point of 2FA. You don’t want it to be in the same place where all your passwords are, otherwise if someone gets access to your passwords they essentially can prove they are you.
That being said, I use a mixture of Authy + Bitwarden. Bitwarden for sites that require it but aren’t really a priority for me to keep separated, and Authy for 2FA codes that I prefer being separate from my passwords.
Reading everyone’s comments here I thought I would go full Bitwarden, but I get the idea of have the 2 factor’s coming from the exact same place
Yea, the whole point of 2FA is to make it so if your credentials are leaked you aren’t compromised!
This is the way
deleted by creator
FreeOTP+
You can use Bitwarden Premium for 2FA keys. It’s pretty cheap and well worth it to support development ($10/yr).
If you’re on Android and don’t want to pay for Bitwarden Premium, I’d use something like Aegis Authenticator.
Yes, I do this too and really like it.
I personally think it’s best to keep 2FA keys out of password managers.
The whole point of 2FA is to have a seconds factor to authenticate you.
If someone gets access to your password vault with your 2FA keys, they have access to all of your accounts - 2FA protected it not. If you keep the keys in another app, they cannot access your accounts nearly as easily.
It’s rather unlikely someone would get access to your vault if you use a physical authentication key like YubiKey. However, I take your point. I personally keep my 2FA, passwords, and backups in separate places.
The reason why I answered with Bitwarden as 2FA is because OP asked what was the Bitwarden of 2FA, so obviously OP didn’t know Bitwarden itself had that feature.
Aegis on fdroid
I use Authy which is great. Much better than google authenticator.
Bitwarden is also great, but I kind of don’t want everything to be in one place.
2nd authy
KeePass. You need TOTP plugin for Windows and there is a nice Android app that implements it out of the box. They also support Steam OTP, though it’s a bit hard to set up.
There is also KeePassXC if you want a cross-platform client, but I have no idea how good it is as I never used it.
KeepassXC is a really good option. I was using it for a while and it was great but bitwarden syncing is just so convenient.
I’m just hosting a file server for that. A bit too concerned about giving my passwords to a third party.
You should be, its the keys to the kingdom.
Syncthing is what I and many other use for syncing.
Google Authenticator is just a UI for TOTP which is standardized. I’ve used Authy for many years. But there’s also many many implementations: https://search.f-droid.org/?q=totp&lang=en
TOTP is available in Bitwarden.
Yubikey is a good option. It supports totp for sites that don’t support physical keys.
I don’t think I’d go with Yubikey, but just because that’s what I’m using at work, that’s the only reason
I have been tempted to get yubikeys but it seems like a hassle to have two and keep them in “sync”.
deleted by creator
This is the way tbh. Though honestly it’s not bad to have two, usually when a website has an MFA flow you can set up the second at the same time, I only have one 5C NFC and it works with my phone and laptops (and iPad)
deleted by creator
deleted by creator
i personally like freeotp made by redhat iirc
Yes: Bitwarden.
Idk about the central instance, but I use my bitwarden (specifically vaultwarden) instance for my TOTP keys. I can just autofill and then it copies the current TOTP key and i can paste it in to log into whatever i’m logging into!
