Nevertheless I chose my Yubikey instead.
that's a refreshing change from the regular Google Authenticator and Authy mentions.
this post was submitted on 09 Dec 2023
223 points (100.0% liked)
Privacy Guides
697 readers
1 users here now
In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.
This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.
You can subscribe to this community from any Kbin or Lemmy instance:
Check out our website at privacyguides.org before asking your questions here. We've tried answering the common questions and recommendations there!
Want to get involved? The website is open-source on GitHub, and your help would be appreciated!
This community is the "official" Privacy Guides community on Lemmy, which can be verified here. Other "Privacy Guides" communities on other Lemmy servers are not moderated by this team or associated with the website.
Moderation Rules:
- We prefer posting about open-source software whenever possible.
- This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, make a suggestion on our forum first.
- No soliciting engagement: Don't ask for upvotes, follows, etc.
- Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
- Be civil, no violence, hate speech. Assume people here are posting in good faith.
- Don't repost topics which have already been covered here.
- News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
- Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
- No help vampires: This is not a tech support subreddit, don't abuse our community's willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
- No misinformation: Extraordinary claims must be matched with evidence.
- Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
- General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.
Additional Resources:
- EFF: Surveillance Self-Defense
- Consumer Reports Security Planner
- Jonah Aragon (YouTube)
- r/Privacy
- Big Ass Data Broker Opt-Out List
founded 2 years ago
MODERATORS
EhrenBVG. Wie immer.
Incredibly based.
Come to think of it, it's sad how we've got so accustomed to be suggested Google Authenticator and the other big corp data funnel 2FA apps by the services that support it
BVG is acronym for Berliner Verkehrsbetriebe, Berlin's public transport agency.
In India, they force us to install proprietary apps, which are probably spying on us.
They don't, though? Who's forcing you to install a proprietary 2FA app in India. Unless you're saying in general.
My bank, for example, does not let us use any 2FA app we want. They have their own separate app, made for handling 2FA for that specific bank only.
And in general too, yes. Like Arogya Setu. The app we had to install to prove our vaccination status.
I self host Bitwarden (Vaultwarden) so I just use the built-in TOTP authenticator in the Bitwarden app. It's nice to have it all in one place + having auto copy and paste when I log in. And because I self host, it's all backed up securely and with (as far as I know) no real backdoors.
ETA: just realized what community this is in. people that replied to me I'm sorry lmao, I'm not a nut about this kinda stuff and I'm by no means recommending this just like using it this way for convenience factor and to keep the likes of google out of my password.
Yeah it compromises the idea of a second factor. Bitwarden is the worst choice. It's only one thing: comfortable
Fair, although I've said in a comment on this account somewhere else, I self host more for convenience sake than anything. I just like having my own password manager, sure it's not as secure to use it for MFA but it's better than giving my passwords to Google, LastPass, etc. and then using eg Google Authenticator. Self hosting is more a corporate distrust thing than a privacy thing for me
I do the same thing. And Bitwarden's 2FA is off my phone. In a complicated world, it's reasonable to keep 1 password + 2FA as secure as possible. I simply can't handle the hassle of pulling out my phone for every 2FA login, but still value the protection 2FA + randomly generated passwords provide.
FreeOTP+ is the choice not Free OTP...
2fas
This is becoming a trend and I really don’t like it.
What exactly?
Setting restrictions on what 2FA/authenticators we can use. I imagine it’s only a matter of time before Google functionally makes it so you can only use theirs when using their services.
Edit: I assumed it was some of the messages I’ve seen elsewhere, my mistake. I don’t need everybody repeating the same comment. Please read the responses before telling me the exact same thing over and over again guys lol
They recommend these two. Under the recommendations it even says you can also use different apps...
At least for what I just posted this isn't a restriction. Its a recommendation. You can still use any other app. I thought its nice that they recommend the privacy friendly ones.
It literally says "Other authenticator apps that support OTP [...] can also be used".
I've gone tons of places that say use Google Authenticator (only) and I just summon the QR code and scan with Aegis anyway and it always works fine. I've never seen a place that required a certain one.