OTPClient VS Aegis

My problem is that Aegis (open source) does not have a Linux app so I have to use an alternative. I found OTPClient, and it seems to fit the bill for a privacy concerns, but I can't figure out how to add it in PayPal as a second device to authenticate with.

If so, check out OTPClient.

Otpclient keep password manager and totp separate .

You can export your secret keys from Aegis, then import them into OTPClient if you want to use it on Desktop. That's the benefit of Aegis being FOSS. Your are not locked in to only using their products.

You didn't share your OS, but on Linux you could use Authenticator or OTPClient. If you want something cross-platform that will sync to multiple devices like Authy, you could give TokenVault in Standard Notes a try.

Expanding on the recommendations here, if you have some old laptop laying around (or can buy one on the cheap off e.g. Craigslist or something), you could install some Linux distro on it, install an OTP generator app (e.g. OTPClient, and then disconnect it from the network entirely. This would probably be considerably more secure than even using a phone, since the only way for someone to steal your TOTP keys would be to have physical access to the machine (and even that can be mitigated, seeing as how any reasonably-modern Linux distro will support full-disk encryption).

OTPClient is what I use. The source code is on github here

You can use otpclient https://github.com/paolostivanin/OTPClient

For 1Password I use a Yubikey, but for 2FA in general, I have a backup phone running Aegis[1].

[1] https://getaegis.app/

Bottom line is, why in the world would you use a mysterious closed source app when there are better options out there? 2FAS is one of the better ones. Aegis Authenticator is another good choice for Android devices.

You can enable 2fa with amazon I suggest you do that with a 2fa app like aegis, that will greatly increase the security of your account and require the 2fa code to login to your account.

Aegis Authenticator has been a lifesaver for me: https://getaegis.app/

I use Aegis[1] on mobile and OTPClient[2] on my computer, both are regularly backed up on change.

I do not use the TOTP feature in my password manager (though I can split it to new DB in keepassXC) as feel it will defeat the purpose of 2FA.

[1] https://github.com/beemdevelopment/Aegis

Google Authentificator → Aegis