this post was submitted on 16 Jun 2023
4 points (100.0% liked)

Privacy

32465 readers
441 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

Hey, I need to move one day of Google Authenticator, and I was wondering if their was a project like Bitwarden for 2 Factor Authentication

Take care!

all 27 comments
sorted by: hot top controversial new old
[–] [email protected] 6 points 2 years ago* (last edited 2 years ago) (1 children)

Aegis Authenticator for Android: https://getaegis.app/

Raivo OTP for iOS: https://raivo-otp.com/

2FAS however is cross-plataform, open source, and what I'm using right now: https://2fas.com/

[–] [email protected] 1 points 2 years ago

I've been using Raivo OTP on my iPhone. 2FAS sounds interesting though as it's cross-platform!

[–] TwilightKiddy 3 points 2 years ago* (last edited 2 years ago) (1 children)

KeePass. You need TOTP plugin for Windows and there is a nice Android app that implements it out of the box. They also support Steam OTP, though it's a bit hard to set up.

There is also KeePassXC if you want a cross-platform client, but I have no idea how good it is as I never used it.

[–] [email protected] 1 points 2 years ago (1 children)

KeepassXC is a really good option. I was using it for a while and it was great but bitwarden syncing is just so convenient.

[–] TwilightKiddy 1 points 2 years ago* (last edited 2 years ago) (1 children)

I'm just hosting a file server for that. A bit too concerned about giving my passwords to a third party.

[–] [email protected] 1 points 2 years ago

You should be, its the keys to the kingdom.

[–] Sleeping 2 points 2 years ago* (last edited 2 years ago)

TOTP is available in Bitwarden.

[–] [email protected] 2 points 2 years ago* (last edited 2 years ago) (1 children)

Bitwarden has TOTP included as a feature. Seems like lots of people don't like using it though, and see storing the 2FA keys with the passwords as "putting all your eggs in one basket".

Aegis seems to be the open source 2FA app of choice for privacy-minded people right now.

[–] [email protected] 2 points 2 years ago (1 children)

Wow, the program that keeps on giving, I'm surprised, I just checked, and I think I'm going to move my 2FA to Bitwarden

[–] [email protected] 1 points 2 years ago

I use bitwarden for the bulk of my 2fas and aegis for the 2fa for bitwarden itself and a couple other sensitive/important sites that I want separated. Be sure to back up your 2fas somehow for bitwarden.

[–] [email protected] 2 points 2 years ago

Yes: Bitwarden.

Idk about the central instance, but I use my bitwarden (specifically vaultwarden) instance for my TOTP keys. I can just autofill and then it copies the current TOTP key and i can paste it in to log into whatever i'm logging into!

[–] [email protected] 1 points 2 years ago (1 children)

You can use Bitwarden Premium for 2FA keys. It's pretty cheap and well worth it to support development ($10/yr).

If you're on Android and don't want to pay for Bitwarden Premium, I'd use something like Aegis Authenticator.

[–] [email protected] 1 points 2 years ago

Yes, I do this too and really like it.

[–] [email protected] 1 points 2 years ago

i personally like freeotp made by redhat iirc

[–] [email protected] 1 points 2 years ago (1 children)

Bitwarden provides a facility for MFA. Though there's an argument to be made against eggs + baskets. It might defeat threw purpose a bit.

I use Aegis which is opensource and easily encrypted and backed up locally. Saved my ass where I accidentally deleted my 2FA for Bitwarden, thus locking me out in circle of shite. Aegis allowed me to roll back and pull in that one missing key without having to redo a load i'd made since the last backup and all was good.

[–] [email protected] 1 points 2 years ago

Yea, I think everyone that is saying Bitwarden supports 2FA is missing the point of 2FA. You don’t want it to be in the same place where all your passwords are, otherwise if someone gets access to your passwords they essentially can prove they are you.

That being said, I use a mixture of Authy + Bitwarden. Bitwarden for sites that require it but aren’t really a priority for me to keep separated, and Authy for 2FA codes that I prefer being separate from my passwords.

[–] [email protected] 1 points 2 years ago
[–] [email protected] 1 points 2 years ago* (last edited 2 years ago)

I use Authy which is great. Much better than google authenticator.

Bitwarden is also great, but I kind of don't want everything to be in one place.

[–] [email protected] 1 points 2 years ago (1 children)

I personally use yubioath for anything that doesn't support yubikey. Sounds like that isn't a solution for you (maybe a totally different, open source hardware key?).

I'd recommend against putting your 2FA inside bitwarden. It's not a very good second factor if both factors can be exposed by getting into your bitwarden.

[–] [email protected] 1 points 2 years ago

It not that isn't absolutely not a solution, but more that I want to split work and life, and I know I could have some remarks if my collegue see the app of the keys used on my not work phone and I could just avoid certain discussions

[–] [email protected] 0 points 2 years ago (2 children)

Yubikey is a good option. It supports totp for sites that don't support physical keys.

[–] [email protected] 1 points 2 years ago (1 children)

I have been tempted to get yubikeys but it seems like a hassle to have two and keep them in "sync".

[–] [email protected] 1 points 2 years ago

I don't think I'd go with Yubikey, but just because that's what I'm using at work, that's the only reason