Ask HN: Recommended 2FA Service?

5 points by smukherjee19 2y ago ↗ HN

With many services requiring the move to enable 2FA, the latest one being Github, perhaps it's a good idea to have a recommended 2FA service thread.

Here's my experience with 2FA so far:

Microsoft Authenticator: Used to log in to work account. iPhone reset -> cannot access the account anymore. Was on phone for 30 minutes with IT department and they were not happy.

What are your recommended 2FA apps?

9 comments

[ 2.9 ms ] story [ 122 ms ] thread

dotcoma 2y ago ↗

For iOS, Tofu is simple and works very well.

https://www.tofuauth.com/

smukherjee19 2y ago ↗

Even though looks iOS-only, I'll maybe give it a spin. Thanks much!

josephcsible 2y ago ↗

I assume you mean TOTP apps in particular. Anyway, KeePassXC and FreeOTP are both good for that.

smukherjee19 2y ago ↗

Ah, I should have been more specific, yeah. I'll check out KeePassXC and FreeOTP, thank you!

rawgabbit 2y ago ↗

I currently use the Salesforce one because when I upgrade my phone restoring the Authenticator on the new device actually works. If there is a better one I am all ears.

https://help.salesforce.com/s/articleView?id=sf.salesforce_a...

smukherjee19 2y ago ↗

This is my first time hearing Salesforce has an authenticator app. Very interesting! I especially like the fact that restoring actually works for you.

I'll check it out, thank you!

t312227 2y ago ↗

i'm a big fan of hardware token - connected via usb/nfc!

especially because there is no need for a mobile device and they are fairly cheap.

and: because they are cheap, i'm using at least 2 per account/service where such keys are supported.

if i lose the one on my (physical) key-ring, i always have a working replacement at home ... :)

just my 0.02€

smukherjee19 2y ago ↗

Very nice! I hadn't thought of a hardware token, but that does sound very alluring! Do you have any particular hardware ones you can recommend? :)

t312227 2y ago ↗

hello,

idk ... there are lots of companies which offer them ... it depends on your use-case.

in my experience:

for simple account-security - eg. github, google, microsoft, etc. - even older ones work great.

for other purposes you have to look at the feature-list of specific tokens, if they support the necessary security-protocol for your use-case.

personally i have various older & newer models of the companies yubikey - 4 & 5 - and gotrust - idem :)

cheers t.