IIRC Steam codes are almost standard except they use a different encoding because... Valve likes to roll their own stuff (?). I agree that trading makes only having codes a bit less useful. They could've used the same codes to confirm trades instead of an entirely separate interface.
[1] https://github.com/beemdevelopment/Aegis/issues/509
[2] https://github.com/beemdevelopment/Aegis/wiki/Adding-Steam-t...
Yeah, steam rolling their own stuff is a bit troublesome at ties, but I think they were among the first to use TOTP tokens, IIRC ? There was a story here the other day on how they roll their own password encryption over HTTPS for logging in... It's a shame they don't use standard authentication mechanisms, though.
And I should clarify: my yubikey is my main 2FA token, though support for U2F/Webauthn is a bit limited.
> Icon library for common websites using OTP
Someone from the community is maintaining an icon pack for Aegis: https://github.com/aegis-icons/aegis-icons. We're currently working on making icon packs easier to use in Aegis, see: https://github.com/beemdevelopment/Aegis/issues/509.
> Maybe Steam OTP support
Steam is supported, actually! But like you said, you'd still need the Steam app if you're doing trading.
Thank you and your sibling comment. I'm glad this is being worked on! Discovery is also important IMO, so a one-tap install of the most widely used icon pack would be nice to have too :)
Thanks. I use andOTP too and was hoping this point was answered somewhere here :-).
You can also display Qr codes to easily export a select few to another authenticator app.
Not sure about Aegis -> AndOTP? Aegis can export txt and json, as well as its own encrypted format.
Then IIRC I heard that andOTP wasn't that secure/maintained. Or maybe that their backup file encryption wasn't that great. I am not sure about these claims, but I migrated to Aegis, that could nicely import AndOTP tokens.
Nowadays, I use it in combination with bitwarden (it supports OTP), which I use for my less important accounts. Bitwarden (self-hosted with bitwarden-rs) allows me to generate those without my phone. I still keep every token in Aegis as well.
AndOTP features I miss with Aegis:
- Icon library for common websites using OTP
- Maybe Steam OTP support? I never used it though, since it would more or less lock me out of trading, without the app, so I use e-mail.