If your phone has biometrics, you can set that up, much quicker than typing password each time.
this post was submitted on 10 Jul 2023
15 points (100.0% liked)
Privacy Guides
697 readers
1 users here now
In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.
This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.
You can subscribe to this community from any Kbin or Lemmy instance:
Check out our website at privacyguides.org before asking your questions here. We've tried answering the common questions and recommendations there!
Want to get involved? The website is open-source on GitHub, and your help would be appreciated!
This community is the "official" Privacy Guides community on Lemmy, which can be verified here. Other "Privacy Guides" communities on other Lemmy servers are not moderated by this team or associated with the website.
Moderation Rules:
- We prefer posting about open-source software whenever possible.
- This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, make a suggestion on our forum first.
- No soliciting engagement: Don't ask for upvotes, follows, etc.
- Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
- Be civil, no violence, hate speech. Assume people here are posting in good faith.
- Don't repost topics which have already been covered here.
- News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
- Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
- No help vampires: This is not a tech support subreddit, don't abuse our community's willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
- No misinformation: Extraordinary claims must be matched with evidence.
- Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
- General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.
Additional Resources:
- EFF: Surveillance Self-Defense
- Consumer Reports Security Planner
- Jonah Aragon (YouTube)
- r/Privacy
- Big Ass Data Broker Opt-Out List
founded 1 year ago
MODERATORS
Ohhhh snap you're right! Thankfully my phone has a fingerprint reader. Never used it but it looks like I finally have an excuse to!
Guess I just need to stop being lazy now. 😅
You can disable encryption and use Aegis without a password, just like Google authenticator.
I didn't realize that. I should do a better job at reading all the settings. Ty!
Oh neat, ty ty!
Apparently you can use biometrics instead of a password each time you require access. Not sure if that still seems like a bother or not, I personally do not mind.
𝐄𝐝𝐢𝐭: Some one else already beat me to this answer, haha.
Ah yea just noticed that; my phone has a fingerprint reader. Didn't even occur to me to use it because I never have. 😂
You can also check out 2FAS, which recently got open-sourced. It comes with browser plugins to autofill 2FA pushed from the phone on request. Makes it a lot more convenient if you need another reason to switch.
You can also check out 2FAS, which recently got open-sourced.
I happened to be comparing this and Aegis so I'll add the biggest differences I noticed. Maybe it helps someone:
- Aegis is Android only, 2FAS is iOS and Android and they have a browser plugin.
- The browser plugin still needs you to approve via your phone/device.
- 2FAS has automated Google Drive backups. You can manually export if you backup via, e.g., Syncthing.
- Aegis has automated "external storage" (e.g., a folder on your phone) and "Android Device" backups—the latter are stored on Google Drive too, but, as far as I understand are used via a device restore (may not be as easy to drop these in as the other backup methods).
- 2FAS lets you secure with a 4-digit PIN and biometrics. Aegis let's you use a full-blown password and biometrics.
Everyone has already mentioned the biometrics, but I think even without that you still should have to suck it up if you want to improve your security.
Also, I think it's worth the hassle of changing to Aegis since you can make backups of your vault pretty easily, something which Google authenticator doesn't provide.
The only option in that app is cloud sync which IIRC isn't encrypted in any way, so your keys are being sent to you-don't-no-where via you-don't-know-how in plain text.
Aegis gives you the option to sync your vault with an encrypted file which you can then import into other Aegis install (I don't know if it has the option to sync an unencrypted version).
Since when has Aegis required a password every time? I've been using it for years and never had to do that.
I think it is the default settings, but you can change it to biometrics
I have neither password nor biometrics set
That's concerning, tbh. I got biometrics set up.
How is it concerning? My phone is password protected.
Btw OP, you can export from Google Auth. and it will give you a big QR code that you can just snap with Aegis, in case you didn't know already.
No need to transfer one-by-one.
You just need to get the code off your phone first.
Doesn’t that defeat the whole purpose though? I would regenerate each OTP “string”, for lack of a better way to say it, rather than bringing them over as Google already has that data.
Err.. how do I get it off my phone tho?
The mental image of me looking at a qr code on my phone screen, and only then wondering how I would catch that on the phone's camera did make me laugh.
😂
A marker and steady hands.
Err… how do I get it off my phone tho?
There are several ways! First, take a screenshot (power + vol. ~~up~~ down is the shortcut for me, not sure if this is an Android default).
Then email it to yourself, or plug in your phone with UTP to a computer and move it out of the picture folder, or print from your phone to a wifi-enabled printer, or use something like Google Keep and sync it to your computer, etc.
Not sure if you're joking but thankfully you can't take a screenshot of Google Auth.
And emailing it would completely defeat the purpose of 2FA
I use aegis as the otp for bitwarden and keepassxc. Currently trying to migrate bitwarden and just use keepassxc while syncing the db to my nextcloud and backup onedrive.
I use a self-hosted bitwarden, it keeps both my passwords and generates TOTP authentication codes
I'v been trying to self host bitwarden but I keep running into error after error. Mostly with nginx 😑
I use bitwarden_rs with docker-compose. I can share my config if anyone is interested.
This is the only way, saving tons of credentials centralised isn't the way to go, if you're able to do it yourself and mantain it.
Not everybody should selfhost
view more: next ›