News for hackers. Stuff that matters.
Re:Show HN: Obsidian - OTP Authenticator by PascLeRasc on Thursday March 18, 2021 @01:43PM (#26505363)
Authy requires a phone number, which you may or may not want to give out, but it also lets that phone number restore backups, so it’s vulnerable to SIM swaps.

Also it’s ugly and super high latency to navigate, but that’s just my opinion.

Re:Show HN: Obsidian - OTP Authenticator by amanzi on Thursday March 18, 2021 @05:29PM (#26507769)
"but it also lets that phone number restore backups" - is this true? I use Authy and can use a phone number to connect a new device to my account, but to restore access to credentials on the new device I need to enter a passphrase. I don't think there's a way to restore credentials with just a phone number, but will need to check.

Edit: the following article appears to confirm my beliefs: https://support.authy.com/hc/en-us/articles/360036580453-Rec...

Without the backup password, you won't be able to restore a backup.

Re:Show HN: Obsidian - OTP Authenticator by ezekg on Thursday March 18, 2021 @06:26PM (#26508182)
You can disable the multi-device capability of Authy to lock it to a specific set of devices e.g. primary and a backup burner if that's your thing.
Re:Show HN: Obsidian - OTP Authenticator by r4id4 on Thursday March 18, 2021 @01:51PM (#26505445)
Yep, I can add that backups in Obsidian are automatically managed and stored on the iCloud Keychain, hence accessible just by using the app on any device
Re:Show HN: Obsidian - OTP Authenticator by toomuchtodo on Thursday March 18, 2021 @02:14PM (#26505672)
Just yesterday I thought it’d be great if Authy used iCloud instead of their own backend for storage. Thank you for building this.

Can I import my OTPs from Authy?

Re:Show HN: Obsidian - OTP Authenticator by r4id4 on Thursday March 18, 2021 @02:23PM (#26505791)
I haven't been using Authy for years, last time I checked there was no easy way to export data from it (they want to keep you tieeeed!), but hopefully things have changed.

You would only need to edit/export the "secret" and copy/paste it to Obsidian, in case they allow it.