Ask HN: Recommended 2FA Service?
With many services requiring the move to enable 2FA, the latest one being Github, perhaps it's a good idea to have a recommended 2FA service thread.
Here's my experience with 2FA so far:
Microsoft Authenticator: Used to log in to work account. iPhone reset -> cannot access the account anymore. Was on phone for 30 minutes with IT department and they were not happy.
What are your recommended 2FA apps?
Comments
I currently use the Salesforce one because when I upgrade my phone restoring the Authenticator on the new device actually works. If there is a better one I am all ears.
https://help.salesforce.com/s/articleView?id=sf.salesforce_a...
This is my first time hearing Salesforce has an authenticator app. Very interesting! I especially like the fact that restoring actually works for you.
I'll check it out, thank you!
For iOS, Tofu is simple and works very well.
https://www.tofuauth.com/
Even though looks iOS-only, I'll maybe give it a spin. Thanks much!
i'm a big fan of hardware token - connected via usb/nfc!
especially because there is no need for a mobile device and they are fairly cheap.
and: because they are cheap, i'm using at least 2 per account/service where such keys are supported.
if i lose the one on my (physical) key-ring, i always have a working replacement at home ... :)
just my 0.02€
Very nice! I hadn't thought of a hardware token, but that does sound very alluring! Do you have any particular hardware ones you can recommend? :)
hello,
idk ... there are lots of companies which offer them ... it depends on your use-case.
in my experience:
for simple account-security - eg. github, google, microsoft, etc. - even older ones work great.
for other purposes you have to look at the feature-list of specific tokens, if they support the necessary security-protocol for your use-case.
personally i have various older & newer models of the companies yubikey - 4 & 5 - and gotrust - idem :)
cheers t.
I assume you mean TOTP apps in particular. Anyway, KeePassXC and FreeOTP are both good for that.
Ah, I should have been more specific, yeah. I'll check out KeePassXC and FreeOTP, thank you!