this post was submitted on 09 Jan 2024
134 points (94.7% liked)
Technology
59092 readers
6622 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
It launched an NFT based donation program: https://2fas.com/donate/
and it is not available on F-Droid.
I'd go with Aegis for an App on Android, or a Bitwarden/KeepassXC password manager which can both handle 2fa tokens too.
I don't like the thought of having my passwords and 2FA live in the same place - that seems to miss the point a bit.
Like your phone?
Ha, fair - and my desktop too, since I currently use the Authy desktop app. However, that's two different sets of credentials an attacker needs to steal/bypass, and two chances to stop them in time.
You can have 2 different keys DB on keepassXC with different passwords, you can even try to save them in separate remote locations. The key points are data interoperability over different devices and its portability over different services, because the worst thing that can happen is that your favourite app, from where you cannot use or move your credentials elsewhere (like the Steam Guard app for instance), one day might stop working suddenly leaving you unable to access your accounts.
Aegis is great.
If you use Linux then OTPClient works great with Aegis since it can open Aegis export files directly. I've set up Aegis to make an export whenever I change something, I sync the exports automatically to my PC, and I open them with OTPClient there.
OTPClient can ask for the export password each time you open it and will close itself automatically if it's not used for a while.
You can also use it to export the 2FA codes further in various formats, show the QR code for any of them, and all kinds of useful features like that.
You can download it straight from their GitHub, or presumably using Obtainium:
https://github.com/twofas/2fas-android/releases/latest
But wow, those NFTs. It's cute that they're trying to create an incentive for donation, and I appreciate that whoever they outsourced that project to, they (allegedly) employed and artist and not a machine to make the components of the artwork... But it would have been a lot less cringe if they had done it in-house and not thrown it onto a blockchain (all use of one validates their use and helps create "value" for them, after all.)
yeah but F-Droid also insures the authenticity and reproducibility of the binary builds