security-guidance
Security guidance from the MOJ Digital & Technology Cybersecurity team (by ministryofjustice)
twofactorauth
List of sites with two factor auth support which includes SMS, email, phone calls, hardware, and software. (by 2factorauth)
| security-guidance | twofactorauth | |
|---|---|---|
| 1 | 12 | |
| 20 | 3,342 | |
| - | 0.5% | |
| 7.1 | 9.4 | |
| 23 days ago | 5 days ago | |
| SCSS | Ruby | |
| GNU General Public License v3.0 or later | GNU General Public License v3.0 or later |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
security-guidance
Posts with mentions or reviews of security-guidance.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-01-05.
-
Busiest hour ever in the history of Gov.uk 17M page requests just 21 5xx errors
[1] https://github.com/ministryofjustice/security-guidance
twofactorauth
Posts with mentions or reviews of twofactorauth.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-02-25.
-
Find which accounts could support 2FA
FYI: Sites that provide 2FA may or may not be listed in https://github.com/2factorauth/twofactorauth
-
All your SMS are belong to us
Using the 2fa.directory as a start, I recently went searching for banks that specifically support MFA via hardware or software tokens. Almost all are non-US based which shows how far behind the US financial industry is w/r MFA. I found one, First Tech Federal Credit Union, which supports software tokens using the Entrust IdentityGuard app. They support business and personal accounts and you can apply online.
- The twofactorauth[.]org site has been taken over
- Ask HN: What Happened to Twofactorauth.org?
-
Best site that provided a list of sites with two factor authentication (2FA) support
Further information that the domain was sold by one of the contributors due to a dispute - https://github.com/2factorauth/twofactorauth/issues/5238
-
Where did the list of 2FA websites go? I cannot find it anymore
See: The twofactorauth[.]org site has been taken over #5238
-
Daily Fi Discussion Thread Wednesday February 17
That said, where possible, 2FA should not rely on a phone number. SMS and Voice are unauthenticated and unencrypted. It's easy and cheap enough to setup a stingray to grab all text messages in an area, and SIM swap attacks are also typically pretty easy (difficulty varies by provider from incredibly simple to might require calling back a few times to get the right rep). Switch to an authenticator app for anything that supports it (https://twofactorauth.org/).
-
Is 2FA too risky?
I backup my seed data every account that has 2FA/MFA support (see https://twofactorauth.org/) into Keepass. It's fairly simple to do. I use a program like Windows' Snipping Tool to capture the QR code displayed by the new 2FA-based service and I save the file as an attachment into my Keepass on the password entry for the 2FA-based service. I also use a QR code reader that deciphers the QR code and then I save that URI string into Keepass as well, extracting the TOTP seed data and also using the KeePassOTP or other KeePass plug-in to allow me to generate TOTP codes directly from my Keepass vault files on either my PC or Android devices.
-
Security Reminder to turn on MFA and use strong passwords on your accounts
Also https://twofactorauth.org/ to check which of your sites have it as an option.
-
10 SIM Swappers Arrested for Stealing $100M in Crypto from Celebrities
It's absolutely unacceptable. A visit to https://twofactorauth.org/ will quickly either dash or build your hopes for the future of online security, depending entirely on what country you live in.
What are some alternatives?
When comparing security-guidance and twofactorauth you can also consider the following projects:
KeePassOTP - Add OTP support (two factor authentication) to KeePass
authelia - The Single Sign-On Multi-Factor portal for web apps
twofactorauth - List of sites with two factor auth support which includes SMS, email, phone calls, hardware, and software. [Moved to: https://github.com/2factorauth/twofactorauth]
awesome-runners - A curated list of awesome self-hosted GitHub Action runners in a large comparison matrix
Bitwarden - The core infrastructure backend (API, database, Docker, etc).
TwoFactorAuth.Net - .Net library for Two Factor Authentication (TFA / 2FA)
TwoFactorAuth - PHP library for Two Factor Authentication (TFA / 2FA)
PatternFly - This repo contains core (HTML/CSS) implementation for PatternFly. Issues related to CSS/HTML and layout should be filed here.