Ask HN: Is Google phasing out Authenticator/TOTP?

• Aegis

  297 8,002 8.6 Java

  A free, secure and open source app for Android to manage your 2-step verification tokens.

  

Just FYI, it's possible to backup your codes on Android using Aegis too. No root needed.

https://github.com/beemdevelopment/Aegis

• rust-u2f

  8 285 5.4 Rust

  U2F security token emulator written in Rust

As it becomes easier to emulate hardware tokens[1], Google may start limiting which ones it accepts. I believe they can use attestation keys to do that.

This is just a softer layer of security to slow down less sophisticated mass signup attempts.

They may very well eventually phase out TOTP, under the justification that it is not as secure, but I would be shocked if they ever retire the highly insecure SMS verification.

TOTP is really easy to implement, and adds a ton of value. I have a oneliner that takes a screenshot, extracts the QR code with zbarimg, and adds it to my pass[2] password database, which then hooks back into my browser. I use it whenever it is available because it is so low effort.

[1]: https://github.com/danstiner/rust-u2f

• WorkOS

  workos.com featured

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• pass-import

  403 768 8.4 Python

  A pass extension for importing data from most existing password managers

• andOTP

  75 3,604 2.5 Java

  Discontinued [Unmaintained] Open source two-factor authentication for Android

  

I use andOTP[1] installed via f-droid. You can easily get a backup file with your codes.

[1] https://github.com/andOTP/andOTP

Suggest a related project