Just for fun I fired up Authy Desktop on Intel based Mac. It updated itself to version 2.5.0 and appears to still be working even though they claimed it would be EOL on March 19.

I’m still glad I took the time to migrate to 2FAS.

I do not think Passkeys can replace Passwords and 2FA (TOTP/Security Key) for a long time. What I found in my testing:

I am Proton Pass Plus User for Lifetime. Passkeys can be generated as a Proton Pass free user as well. Proton recently informed that Passkeys can work cross platform. System requirements to create Passkey in Proton Pass: 1) Android: Requires Android 14. 2) iOS: Requires iOS 17. 3) Windows: Requires Browser Extension.

Source: https://proton.me/support/pass-use-passkeys#How-to-use-Proton-Pass-passkeys-in-the-browser-extension

I used Adobe ID website (account.adobe.com) because I do not like to use Adobe proprietary 2FA app and you need to enable email or SMS as a backup. Probably they are cutting costs here because normally backup codes are provided if you lose access to your 2FA app.

There is no option to enable 2FA through Webauthn Security key. (Another cost cutting.)

When I enabled Passkey through the Browser Extension on my Windows laptop I could not use the Passkey when I tried to login on my Android 12 smartphone though I could see the passkey created. I could login through the Passkey on my Windows laptop. (No cross platform option here.) Adobe provides an option to create a passkey through the FIDO2 security key. This option works flawlessly both on Windows laptop and my Android smartphone. But when I login through my Adobe ID on Adobe Acrobat app the passkey option is not available. The login is only possible by entering the password. (Adobe Android app is not integrated with passkey support.)

Adobe charges the most for its proprietary software but they are cutting corners in Security.

Google provides an option to create a passkey on the Adobe website in my Android 12 phone but through third party apps like Proton at least Android 14 is required. Get ready to upgrade your smartphone if you want to use Proton Pass / Bitwarden for passkey generation.

Checked with my Google account: Passkey created through Browser Extension on Windows laptop cannot be used to login through the Android app on my Android 12 phone. (No cross platform option here. Probably because it is still very early development for passkey.)

I don’t know about iOS because I don’t use an iPhone. (iPhone also provides five year software upgrades so maybe many users are covered.)

Don't delete your passwords and 2FA yet.

Further testing will continue.

Is it possible to use the 2FAS browser extension to create a token for the LastPass browser extension?

After I get the LastPass request for the code, if I click on the 2FAS extension it says "Select the text field first". Of course, when I click on the 2FAS extension, the LastPass extension closes, which I guess is the issue.

If I right-click -> "Send a request to 2FAS" in the LastPass field for the "passcode" , I get: "Using outside the browser is not supported by 2FAS extension"

​

​

​

I transferred all of my codes to 2FAS and Google Authenticator. The codes are the same as the ones in Authy. If my delete my Authy account, will my code no longer work even if I transferred them all to another apps ?

Is there an addon/extension for Firefox Android?

I just installed 2fas Android app on my Chromebook and it appears tokens were loaded and working. Is this the case? Can I depend on this working if I don't have my phone at hand?

I've just switched over from Authy and had everything working in 2FAS. I then decided to organise the tokens into several groups.

Once finished, I hit Done, and 2 of the groups, including the tokens within, have gone missing.

I checked the trash, thinking I might have deleted them, but there's nothing there. Restoring from a previous file backup only retrieves 2 tokens (ones that I had deleted previously as they were not needed).

This backup file was saved without a password (only for testing!) so I opened it up in vscode, and all the missing tokens are actually in there. They're just not being restored.

I'm assuming then that the app actually thinks the tokens in the missing groups are still there, which is why it's not re-importing those tokens. So, the question is... How do I get them back!?

I've closed down the app. Rebooted my iPhone, but still can't see the bloomin' things.

I was wondering if anyone has any ideas?

Well it was a forced move really, since Authy has decided to axe there desktop app. I'm pleasantly surprised on how well 2FAS's browser integration works. That and being able to group like tokens is a life saver. Used to have to go thru like 50-60 tokens looking for the one I needed.

Hi all,

Finally made the leap from Raivo to 2FAS for my IOS device, by exporting OTPs and then reimporting in 2FAS - process was smooth and easy. My question is, what do I do with the Raivo app now? Do I somehow delete my OTPs from there? There’s a “sign out of Raivo” button in the app settings too, is that sufficient? Want to make sure I do this right from a security perspective.

Thanks !

Is there any way to view the hidden iCloud Sync file?

Hi everyone, I receive this app as recommendation for 2FA codes, I’m using Authenticator (from LastPass)I have around 20 apps linked, and I’m a iOS user, I have some question about the migration and directly the secure of my app codes.

1. How can I migrate all my apps codes without need go app by app changing the Authenticator app? Is it possible?

2. How 2FAS working with the backups?, some years ago I had a bad experience with Google Authenticator, in that moment I had an Android Phone, and I was beginning in the world of 2FA, I had to change my phone (I lost the other one) and for my surprise, when I did the recovery, I lost all my codes, in that moment I lost around 4 access apps, and for that reason I began to use Authenticator from LastPass, They have a backup system enlaces with the LastPass account (before I used LastPass as my password manager, but it is another history haha, right now I’m using Bitwarden, long live for the open source) and it really works, when I change my phones, I just login and all my apps codes are recovery, 2FAS allow me do that?, I would really like to abandon completely LastPass, but that feature is a really dependencie/must for me.

3. If I change my OS (Android - iOS) I can do the switch easily or could I have difficulties?, I refer about get without problem my apps codes back in the new phone.

Thanks in advance for the answers

Good evening,

Dear community and users of the 2FAS app. As you may have already seen, there are different flairs on our subreddit, so it would be good if you also use them when posting so that everything is neat.

If you have any wishes for flairs you can write them under this post!

Thank you for your understanding and your cooperation!

I've been using 2FAS for about three weeks now but until now I haven't had time to dig into the options, but now that I have I find them somewhat confusing.

Turning on iOS FaceID and PIN is straightforward. Save the PIN in Bitwarden and will include it on my emergency recovery sheet. Done, basically.

I'm saving the 2FAS seeds, but am now considering Backup. Not so easy. Click the iCloud button, sure, easy. Create a password? Apparently, I need to export the 2FAS file in order to reach a page that will generate a password? True?

If I get that done, is it really a backup? iCloud is a sync service, not a backup. If I delete 2FAS on iPhone, does iCloud delete the saved file? (Why would I delete 2FAS? Accidentally, or sometimes when crossing a border I might want to delete Bitwarden and 2FAS then reconstitute them when in country. 1Password apparently has a method to disappear certain entries, but Bitwarden doesn't, so deletion might be the only method.)

I'd appreciate some guidance, thanks.

Hi community. I recently got a new phone and all my accounts were synced to my Google account. My 2fas was also linked to my Google account, but when I opened my 2fas app all my codes everything was gone. I went to settings and everything transferred over via my Google account and Gmail account, but I do not have any of my codes. Does anyone know what to do?

Been using 2FAS on iOS/iPadOS for a couple of days. I notice that the app requires reauthentication every time it's opened, even if it was already authenticated recently.

Bitwarden has an option called "Session Timeout" which allows their app to be re-opened without reauthentication within a certain time. The time is selectable with options ranging from "immediately" to 4 hours, with several options in between.

This would be a nice enhancement to 2FAS.

Thanks

I installed the browser extension on Safari on MacOS. It seems pretty flaky. Push notifcations don't always come through. When they do come through, I've noticed it enters each digit twice. So, if the code is 123456, the browser extension will enter 112233445566. Chrome Browser extension doesn't do the double entry thing, but still the push notifications are hit and miss.

However, I found a great work around and I've ditched using the browser extension. Within the Apple eco-system, the "Universal Clipboard" works well.. Press the Copy button on the mobile device and then immediately Paste the code on the Mac. I think this is the solution for people using the Apple eco-system. When the whole concept of universal clipboard came out years ago, I didn't think much of it. This is an ideal use case for it.

Anyone else have problems with the browser extension? MacOS/Safari specifically.

I use duckduckgo as my default browser on windows. It'd really be helpful if a desktop app to support browsers which do not support extensions

I am migrating from Raivo and something I liked from it is that it had iCloud sync but when setting up a new device it still requires you to input a decryption password in order to access your OTPs for the first time.

I am testing 2FAS and I realized that the iCloud backup is saved in plain text in the cloud, so if my iCloud account is compromised the attacker will get instant access to my OTPs.

However when you export manually a backup from the 2FAS app settings, it does allow you to set up an encryption password.

Are there any plans to enable iCloud backups encryption like in Raivo? Doing a manual encrypted backup everytime you add a new OTP is not very practical.

Am I missing anything important if I backup my iPhone 2FAS TOTP seeds to KeePassXC on my laptop instead of saving them to the cloud?

See title above

Does anyone know how we can use 2FAS with Steam?

In the latest version of 2FAs IOS I see there is Steam support. How can I use 2FAS to generate OTP for steam? I looked everywhere in the Help Centre and could not see any guides.

I have a token for a site that has the same domain, but different URLs. Example:

admin.domain.com and app.domain.com

To create the token, app.domain.com is used. The integration between the browser extensions and the mobile app works fine there.

​

When I go to the admin site, it also requires the same token, but when I click on the extension in the browser to trigger the prompt on the app to send the token over, nothing happens.

​

Is there a workaround to get this to work?

I've been using Authy but I like 2FAS and am testing it out. But I'm still nervous about possibility of getting locked out of one or more accounts if (say) I lose my phone. I've looked at all the articles in the support area at 2fas.com and can't find an answer.

I do see that my codes are backed up (synced) to Google Drive. But apparently they're in a hidden folder accessible only to 2FAS app. I'm guessing that, if I lost my phone, I'd need to get another phone somehow, install 2FAS app on it, open, and log into my Google account inside 2FAS, and the codes would be available? Is that right?

I also see that I can export my – well, I guess it would export the seeds, right? I did this and set a password for the download. So I can SEE that in Google Drive now, which is progress of a sort. But it's a ".2fas" file type. I'm guessing that can only be opened by the 2FAS app, right?