[email protected]: An open source two factor auth app that syncs keys between devices?
[email protected]: An open source two factor auth app that syncs keys between devices?
Isn't the value of two factor auth that it requires a physical device (your phone or computer) with the auth key to authenticate you? Then why don't many two factor auth apps seem to support syncing? If it's fine to do so, are there any open source cross platform apps that sync keys?
Nextcloud + Passman would do so.
One could argue that this is against the idea of 2FA. In case you lose your device, you should simply use another with different token and delete the validity of the lost one.
Additionally, as 2FA is supposed to add an extra layer of security, having 2FA token and passwords stored in the same db is also not the best idea in that regard.
The hard part is securing the exported tokens in a way that you could quickly replace them in the event a device was lost/compromised. A good practice would be something like with Aegis you can have it save an encrypted export whenever you make a change and then sync that to an external location where you can re-import it from. Wiping them from the original lost device is another challenge in itself, but as I recall both Android and Apple have mechanisms where you can send a signal to remotely wipe the system.
I use 2FAuth. it's web based but that has the plus of working anywhere, even on desktop
I usw Aegis on my phone and sync them to the PC via Nextcloud, on the PC i use OTPClient
I'm, using Nextcloud + KeePassXC (DX on android). Nextcloud part can, obviously, be replaced by another mechanism.