News for hackers. Stuff that matters.

A comment on Passwordless: a different kind of hell?. Parent comment

Re:Passwordless: a different kind of hell? by hot_gril on Tuesday January 16, 2024 @12:11PM (#39015774)
It's the Google Authenticator app's fault. The most popular TOTP app probably, and for a long time, they were saying it's intentionally designed not to let you copy the codes. Now you can, but there are lots of pitfalls and vague documentation. I'm not convinced that TOTP is a user-friendly design to begin with, but it didn't have to be this bad.

I don't fw TOTP now. There are other apps, but I'm done. I'll only use it if the iPhone Keychain has built-in support some day.

[ Parent | on HN ]
Re:Passwordless: a different kind of hell? by eppsilon on Tuesday January 16, 2024 @12:52PM (#39016329)
The iOS Keychain already supports TOTP.
[ Parent | on HN ]
Re:Passwordless: a different kind of hell? by hot_gril on Tuesday January 16, 2024 @01:53PM (#39017185)
Ah yeah, it's hidden away a little cause they don't call it TOTP and you need to manually copy codes into your settings app. Gonna see if I can set it up on Mac cause that's where I'll actually maybe need it.
[ Parent | on HN ]
Re:Passwordless: a different kind of hell? by Willamin on Tuesday January 16, 2024 @02:08PM (#39017478)
Set up should be simpler than needing to manually copy codes into your settings app.

When a QR code is present on screen that resolves to a TOTP seed, an additional context menu option should be present to "Add Verification Code in Passwords" or "Set Up Verification Code" or similar.

Here's a screenshot I nabbed from a way-too-wordy article on the subject: https://tidbits.com/uploads/2021/10/Add-Verification-Code-15...

[ Parent | on HN ]