News for hackers. Stuff that matters.

A comment on Authy: Faster Two-Factor Authentication. Parent comment

Re:Authy: Faster Two-Factor Authentication by zimbatm on Wednesday July 31, 2013 @11:37AM (#6134495)
Hi Daniel, two questions:

1. What is your business model ? The app looks great and I wouldn't want to see it go away in a couple of months.

2. There is a registration process that ties the app to my phone and there seem to be a recovery process. Does it mean that the secrets are stored on your servers ? If yes, what prevents you or one of your employees to gain access to the secret keys ?

[ Parent | on HN ]
Re:Authy: Faster Two-Factor Authentication by danielpal on Wednesday July 31, 2013 @06:59PM (#6137386)
Business Model: We have an API that companies use to add two-factor auth to their sites/infrastructure. We charge for that. see www.authy.com/developer/pricing

2. The recovery process enables your phone. If you decided to enable backups(which is optional) encrypted versions of you accounts are stored in our servers (that's why it called backups). Authy employees can't gain access because only encrypted version is stored, you chose the encryption key and have to remember it.

[ Parent | on HN ]