I’m thinking of moving out of 1Password and just using Keychain, but that means I need a different 2FA solution. I used to use Authy on my phone. Any others I should consider?
I’m thinking of moving out of 1Password and just using Keychain, but that means I need a different 2FA solution. I used to use Authy on my phone. Any others I should consider?
@jack I have tried Lastpass before. The number of subscriptions in this day and age seems increasing at alarming rate.
@jack I have the same setup with Keychain and Authy and it works very well for free, and Keychain is very secure. There’s only one small glitch I’ve found, and that’s sometimes the password generator doesn’t show up on the occasional site or app, forcing me to use Bitwarden to generate the password instead. Don’t know why this happens, but it’s infrequent enough that I’m not too bothered by it.
@jack I use Step Two app for iOS made by an independent developer. I've had it for a few years and it works great. steptwo.app It's also part of the Setapp package if you have that.
@alongtheray I didn't know about Step Two, thanks! And I have a SetApp subscription so it's easy enough to try.
@pimoore This may be where I end up, since I know it. So you use Bitwarden just for password generation then?
@jack Correct, I just have a dummy account set up in BW and only use it the occasional time Keychain’s password generator doesn’t kick in, which is rare. At one point I had tried OTP Auth, but I didn’t like it enough to replace Authy.
@alongtheray @jack Holy shit! I never thought I’d get so excited about how good a two factor app looks, but there I just said it. Gonna give this one a try, thanks for the link.
@pimoore That's why I glommed onto it. Check out his website, he has other cool apps 'n such. Enjoy!
@Alligator Nothing dramatic, really. 1Password acted up a couple times in Safari and it made me think about whether I actually need it. For web logins, Keychain works pretty well and is everywhere automatically. I'm all for fewer moving parts and subscriptions where it makes sense, so thought I'd try going without it.
@jack akamai MFA - which has the bonus that it can act as a fido2/u2f token for sites which offer that - which is much more secure than TOTP even from an app.