decrypt-otpauth-files VS andOTP

I used OTP Auth.app (https://cooperrs.de/otpauth.html) for many a while years on iOS and then on macOS too.

Now I've mostly transitioned to using the built in OTP handling in Keychain. Every so often I find one I haven't migrated across yet.

Another option is HE's NetWork Tools iOS app, which also has an OTP Authenticator in it. I believe it's a lot less integrated though (I don't think it provides a browser plugin, for example).

Forget all the cloud-based Authenticators and use OTP Auth. https://cooperrs.de/otpauth.html

I have been using OTP Auth for a while. It doesn't get updated a lot but it's working fine.

https://cooperrs.de/otpauth.html

I do that using a separate app, (OTPAuth for iOS), and pretty much for the same reason.

OTP Auth Website

Good point. See also the developer's website: https://cooperrs.de/otpauth.html

Sure, that's a possibility. I believe it is developed by a single person. But the OTP Auth app allows you to export an encrypted backup that can be decrypted using an open source tool available here: https://github.com/CooperRS/decrypt-otpauth-files. Also, the OTP Auth app lets you view the original secrets (and display QR codes) used to create the TOTP entries. So it would be relatively easy to simply scan the QR codes with whatever new app you wanted to use in the future. In my book, that makes OTP Auth the safest option because I am guaranteed an easy way to migrate to a new app if I ever need to do so. ... Also, OTP Auth lets you have folders (in addition to searching), which is really helpful if you have a lot of 2FA accounts.

This is the best iOS answer. One of my most favorite apps. https://cooperrs.de/otpauth.html

OTP Auth. https://cooperrs.de/otpauth.html For iOS and macOS

I love F-Droid and try to use apps from there whenever possible.

I did recently discover that andOTP is no longer maintained, though. I've switched to Aegis since.

https://github.com/andOTP/andOTP

I use andOTP[0] which auto-exports an encrypted backup to a local folder, which is then synced with Syncthing[1] to my NAS.

It's seamless and doesn't need an internet connection.

- [0]: https://github.com/andOTP/andOTP

- [1]: https://syncthing.net/

- AndOTP github project is archived in june 2022: https://github.com/andOTP/andOTP

I used FreeOTP before that, which is also fine. I switched because maintenance had been fairly uncommon and there were some minor issues bugging me, but it seems to have picked up again recently, and it's backed by Red Hat as an entity for better or for worse. andOTP is officially deprecated, so I recommend switching to either of those.

At the moment this works with encrypted backup files from andotp and aegis and it totally fullfills my lazyness needs. :)

I was happily using andOTP but seems like it has been unmaintained since June - https://github.com/andOTP/andOTP.

I wish F-Droid or Play Store had a feature like GitHub's 'Archived' to inform users.

You can use whatever 2FA you want, but you need to extract the secret key for it using some scripts. i did it a while ago and i have both blizzards and steams 2fa on Aegis on android, also works in KeepassXC. I think the 2fa app needs to have support for it but it works. https://github.com/andOTP/andOTP/wiki/Shared-secrets

I would switch to andOTP since it allows you to export the keys.