News for hackers. Stuff that matters.

A comment on Warning: Google Authenticator upgrade loses all accounts.

Re:Warning: Google Authenticator upgrade loses all accounts by clarkm on Wednesday September 04, 2013 @01:57AM (#6325843)
For those looking for Google Authenticator alternatives, I recommend either Duo Mobile from Duo Security or Authy. I ditched Google Authenticator a while ago and haven't missed it one bit -- having a single app manage my two-factor tokens / keys is much more convenient.
[ Parent | on HN ]
Re:Warning: Google Authenticator upgrade loses all accounts by dan1234 on Wednesday September 04, 2013 @03:19AM (#6326098)
I switched to HDE-OTP[0] a while ago and never looked back. I've not encountered any bugs with it and it's also better looking.

[0]https://itunes.apple.com/gb/app/hde-otp-generator/id57124032...

[ Parent | on HN ]
Re:Warning: Google Authenticator upgrade loses all accounts by zimpenfish on Wednesday September 04, 2013 @04:47AM (#6326345)
You have a beautiful screen on your iPhone with great font rendering and ... it mimics a 7 segment LCD display.

For shame.

[ Parent | on HN ]
Re:Warning: Google Authenticator upgrade loses all accounts by MiguelHudnandez on Wednesday September 04, 2013 @02:40PM (#6329532)
Almost like building a notes app and putting leather stitching all around it.

Skeumorphism is dying, thankfully.

[ Parent | on HN ]
Re:Warning: Google Authenticator upgrade loses all accounts by SteveCr48 on Wednesday September 04, 2013 @12:47PM (#6328770)
Yep, HDE OTP works great and looks nice. Thanks.
[ Parent | on HN ]
Re:Warning: Google Authenticator upgrade loses all accounts by mik3y on Wednesday September 04, 2013 @02:33AM (#6325978)
In light of this incident with GA, do either/any of the alternative support "export" of the underlying secrets, for instance to migrate to a new app?
[ Parent | on HN ]
Re:Warning: Google Authenticator upgrade loses all accounts by RazerM on Wednesday September 04, 2013 @05:45AM (#6326495)
You can store the key (the alternative to using a QR code) you're given to set up 2FA in the first place.
[ Parent | on HN ]
Re:Warning: Google Authenticator upgrade loses all accounts by nwh on Wednesday September 04, 2013 @02:00AM (#6325856)
Edited: Authy requires a mobile number and a remote server to store your tokens though.
[ Parent | on HN ]
Re:Warning: Google Authenticator upgrade loses all accounts by beedogs on Wednesday September 04, 2013 @02:02AM (#6325866)
Seriously. What's the difference between this and just setting up a webcam pointed at all your SecurID tokens?
[ Parent | on HN ]
Re:Warning: Google Authenticator upgrade loses all accounts by clarkm on Wednesday September 04, 2013 @02:15AM (#6325918)
Duo does not require this at all. And Authy only requires you to store their "Authy" token. You can add additional, e.g. Github, tokens to Authy and choose not to sync them with the Authy servers. That's what I do.
[ Parent | on HN ]
Re:Warning: Google Authenticator upgrade loses all accounts by chmars on Wednesday September 04, 2013 @04:25AM (#6326271)
Authy requires your mobile phone number and the creation of an account to work at all … or am I missing something? I haven't found a way to use Authy without providing my mobile phone number and creating an account.
[ Parent | on HN ]
Re:Warning: Google Authenticator upgrade loses all accounts by elithrar on Wednesday September 04, 2013 @02:04AM (#6325874)
> Both require your mobile number and for a remote service to store all of your tokens though..

Duo does not, for the record. Download and go.

[ Parent | on HN ]
Re:Warning: Google Authenticator upgrade loses all accounts by nwh on Wednesday September 04, 2013 @02:09AM (#6325890)
I seem to have recalled that one wrong then, or they've changed their service since I last saw it.
[ Parent | on HN ]
Re:Warning: Google Authenticator upgrade loses all accounts by PLejeck on Wednesday September 04, 2013 @02:01AM (#6325865)
This is not at all true. Both are generating your tokens clientside with no internet connection. Try disabling internet access, it should work.

As for the mobile number, I didn't have to type that into Duo Mobile when I installed?

[ Parent | on HN ]
Re:Warning: Google Authenticator upgrade loses all accounts by nwh on Wednesday September 04, 2013 @02:10AM (#6325893)
You certainly do for Authy, I was apparently wrong about Duo.

http://i.imgur.com/dY1zWUe.png

[ Parent | on HN ]
Re:Warning: Google Authenticator upgrade loses all accounts by theatrus2 on Wednesday September 04, 2013 @11:41AM (#6328313)
I second the recommendation for Duo. Its a great application, and if you're looking for adding 2FA to your own systems (IT or otherwise) has a multitude of interaction options (secondary password LDAP, etc).
[ Parent | on HN ]