Re:Turn on MFA Before Crooks Do It for You
by lambda_tango on Saturday June 20, 2020 @12:35AM
(#23581689)
I had to get the seeds out of Google Authenticator several years ago. The seeds were stored in an SQLite database file in the app directory. I think I used another app to read the DB file and export the seeds to plain text, but you could also conceivably copy the file to a computer and work from there, though you might need root access either way.
[ Parent
| on HN ]
Re:Turn on MFA Before Crooks Do It for You
by tgsovlerkhgsel on Sunday June 21, 2020 @12:10PM
(#23592830)
Yes, all of this requires a rooted phone or otherwise subverting the Android security model.
A potential alternative could be finding an ancient APK that didn't have the 'prevent backup' bit set, downgrading via adb install, and pulling an adb backup. Still, massive PITA.