Tell HN: It is impossible to disable Google 2FA using backup codes

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured
  • extract_otp_secrets

    Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console.

  • You can extract plaintext secret keys from google authenticator app and store them in user friendly format/password manager

    https://github.com/scito/extract_otp_secrets

  • totp-extractor

    :shit: Dealing with camera photos of QRCode exports

  • The problem I had while my company phone got remote wiped: Google Authenticator uses a protobuf based export qr code, which any other 2FA app doesn't support.

    I wrote a small cli tool that can export all data inside it, and that tries to generate qrcode images for each entry for re-import into another 2fa app.

    I hope this can help someone with the same problem, I got stuck with a camera photo of this seemingly useless qrcose.

    Always remember to backup google authenticator, and always make a physical backup of your encrypted passwords database!

    [1] https://github.com/cookiengineer/qrcode-extractor

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • scrcpy

    Display and control your Android device

  • OP: Do you still have adb running on the phone?

    If yes, then you might be able to backup google authenticator's data using adb.

    Maybe a tool like scrcpy [1] might be able to help when the screen is broken.

    [1] https://github.com/Genymobile/scrcpy

  • Aegis

    A free, secure and open source app for Android to manage your 2-step verification tokens.

  • [2] https://github.com/beemdevelopment/Aegis

  • android-otp-extractor

    Extracts OTP tokens from rooted Android devices

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • TOTP Authentication with Free Software

    9 projects | news.ycombinator.com | 3 May 2023
  • Google Online Security Blog: Google Authenticator now supports Google Account synchronization

    5 projects | /r/Android | 24 Apr 2023
  • Google Authenticator's first update in years tweaks how you access security codes

    6 projects | /r/Android | 3 Jun 2022
  • Good enough security?

    3 projects | /r/Bitwarden | 9 May 2022
  • I want to switch from Google Authenticator to Authy, but I'm too afraid Authy will shut down due to financial issues. What should I do?

    1 project | /r/androidapps | 4 Oct 2021