Warning: Google Authenticator upgrade loses all accounts
Authy (YC W12, [1]) is a nice replacement for the GA app. Besides being more stable, it has also the "benefit" of allowing you to back up your keys, and recover in the case of a lost phone or deleted app.<p>Thankfully, backing up is entirely optional, and turned off by default. While they claim backups are encrypted with PBKDF2 [3], I still would never ever use something that sends my tokens to a remote server, as it'd defeat the purpose of 2FA in the first place.<p>Still, I can see the use for casual users that care enough to have 2FA, but not <i>that</i> much to worry about tokens being stolen and decrypted from Authy..<p>Past discussions on HN here [2], [3], [4].<p>[1] <a href="https://www.authy.com/thefuture" rel="nofollow">https://www.authy.com/thefuture</a>
[2] <a href="https://news.ycombinator.com/item?id=6133648" rel="nofollow">https://news.ycombinator.com/item?id=6133648</a>
[3] <a href="https://news.ycombinator.com/item?id=4916983" rel="nofollow">https://news.ycombinator.com/item?id=4916983</a>
[4] <a href="https://news.ycombinator.com/item?id=4330050" rel="nofollow">https://news.ycombinator.com/item?id=4330050</a>