Google's Abandoned Android Authenticator App

Re:Google's Abandoned Android Authenticator App by exabrial on Friday February 28, 2020 @11:41AM (#22444016)

Wait, can it steal the stored secrets or just codes? I'd love for a utility that can "steal" the secrets so I can migrate to my yubikey 5c.

[ Parent | on HN ]

Re:Google's Abandoned Android Authenticator App by pyt on Friday February 28, 2020 @11:51AM (#22444101)

If you have a rooted Android phone, I wrote a tool to pull secrets from most popular OTP apps: https://github.com/puddly/android-otp-extractor

[ Parent | on HN ]

Re:Google's Abandoned Android Authenticator App by cesarb on Friday February 28, 2020 @12:07PM (#22444237)

You might not even need a rooted phone. For at least one of these apps, you can extract the secrets from an ADB backup, which does not need root (it only needs the developer mode).

[ Parent | on HN ]

Re:Google's Abandoned Android Authenticator App by pyt on Friday February 28, 2020 @12:13PM (#22444302)

Interesting. Do you know which still one allows backups?

[ Parent | on HN ]

Re:Google's Abandoned Android Authenticator App by eyegor on Friday February 28, 2020 @11:44AM (#22444052)

Isn't there a way to get it to display the qr codes for connected accounts? Then you could migrate via registering those.

[ Parent | on HN ]

Re:Google's Abandoned Android Authenticator App by exabrial on Friday February 28, 2020 @12:52PM (#22444681)

No there's not unfortunately. Nowadays, I encrypt the QR codes using my GPG key and store them with pass.

[ Parent | on HN ]