-
Ever wanted an RSS feed of all your favorite gaming news sites? Go check out our new Gaming Headlines feed! Read more about it here.
-
We have made minor adjustments to how the search bar works on ResetEra. You can read about the changes here.
Two-step verification with authenticator apps is finally being added for PSN on the next PS4 FW
- Thread starter nolifebr
- Start date
To make it explicit, the primary reason that this is good news is because SMS 2FA can be defeated via SIM Hijacking. App-Based 2FA can't.
The other reason to use Authy is because said backup is also encrypted with your own key, meaning if Authy did get hacked, your tokens would be safe (given a sufficiently strong password).
The other reason to use Authy is because said backup is also encrypted with your own key, meaning if Authy did get hacked, your tokens would be safe (given a sufficiently strong password).
Just remember to install it on more than one device and disable multi-device( If that is still on by default) once you have added your devices as you would still be vulnerable to SMS Hijacking.
See -
Reddit - Dive into anything
www.reddit.com
Understanding Authy 2FA’s Multi-Device Feature - Authy
How Many Devices Do You Use? We don’t need to tell you that the world no longer connects to the internet through just a laptop or desktop. In fact, 80% of internet users today own a smartphone. On an average day, smartphone users look at their device 46 times and, collectively, Americans check...
authy.com
Understanding 2FA, the Authy App, and SMS - Authy
Authy was recently contacted by Decryptionary, a cryptocurrency and blockchain dictionary, with concerns about security vulnerabilities of using SMS for two-factor authentication (2FA) and questions about how SMS is used in conjunction with the Authy 2FA apps. These are great questions. There...
authy.com
Personally prefer to manage the backup myself as apps like Aegis Authenticator & andOTP allow for encrypted and plaintext backups for which I can get the OTP seed which is what is used by the apps to generate the codes. Which means I am not tied down to one app as it allows me the flexibility of generate the codes whenever needed.
THIS!!! I used Google Authenticator and I restored my phone (and another time replaced it with a new one) and it does NOT backup to the cloud. I had to go back and get all my 2FA codes from various sites, and I am sure I am missing some. Meanwhile with Authy, it backs up to the cloud and works greatly. Even for apps that say "Use Google Authenticator", Authy works.
Now I can experience the tantalizing possibility of losing access to my account forever if I drop my phone down the sewer.
Yeah, this is the answer.
Didn't know this but Google now offers a way to transfer accounts for when you get a new phone. I don't think there's any way for when people lose their phones/can't turn it on. But I'm glad to know they have this option.
Oh, and it's Android only for transfers.
Introducing portability of Google Authenticator 2SV codes across Android devices
Posted by Dongjing He, Software Engineer; Teddy Katz, Software Engineer; Christiaan Brand, Product Manager Today is World Password Day, an...
Will this work with the MS Authenticator as well? That's the one I use (I wish Apple had an Authenticator app).
Fucking finally.
Probably the same way as you do now by generating a device password on verified device.
Cloud backups are invaluable! I've been using Microsoft Authenticator which also has cloud backups.
Really embarrassing its taken this long. One of the only accounts I have that didnt have it.
Now whats the over/under on proper u2f support?
Now whats the over/under on proper u2f support?
Just now I've had to try 4 times to log in until I finally got the stupid SMS code. This can't come soon enough.
Yes. Based on the description so far sounds like they are using industry standard TOTP codes meaning it should be compatible with majority of "authentication apps" like MS authenticator etc.
Somewhat technically but gives a brief overview on TOTP.