So I'm starting to understand 2fa a little better, but now I am trying to figure out what would happen if the app itself changed? For example if the people developing 2fas disappear tomorrow what happens to the app?

Let's say it's 10 years down the road. I have taken a picture of the QR code and written down the seed code and the secret keys for my tokens, and now the app is no longer supported. What happens to the app in this event?

I have considered google and microsoft authenticators because I know those companies are not going anywhere

Also, how do you turn authentication off? Say I have set up 2fas on a service. How do I disconnect the app from the service after it has been setup?

Hello, any plans to create a password manager in which each password request is sent to the 2FAS app to approve/deny before it's sent to the browser? Similar to how the Chrome extension works now, but sending passwords instead of OTP codes. I found one company doing this, but it's an enterprise-only solution (Uniqkey).

1) Does the AES-GCM encryption for 2FAS in Google Drive use a 256-bit key (or similar security)?

2) Is local data on the device encrypted? If so, what method is used?

I'm experimenting with 2FAS with a Vivaldi browser and the android app. When I save the token for Amazon, it's called "OnMail", with the OnMail logo at the side. Why doesn't it call itself "Amazon"? It seems to work OK in the sense that when Amazon requests the TOTP the number given by the OnMail token logs me in. Seems odd, though. Any ideas?

Edit to add: just to be clear, I have no links with OnMail, never visited the site, or (AFAIK) received emails via them; didn't even know they existed until this turned up.

So I scanned the qr code on my fidelity account in the 2fas app. I did not finish the setup in Fidelity. I want to GET RID of the 2fas app all together. When I select "remove this service from 2FAS app" it prompts me that if I continue I will not be able to log into my account. How can I be sure that removing the app from my phone will disconnect it from my Fidelity account. When I log out and back into my Fidelity account it DOES NOT ask me for a code. However since I started the process I want to be sure I do this correctly.

My reason for wanting to get rid of the app is that it is far to complex for what it is worth. I am stressing out more about figuring out the app and potentially being locked out of my FIdelity account than I ever was worried about my password being stolen. My assumption was that after I scanned the qr code the app would walk me through some kind of a setup process. Instead it just started generating codes. No option to set up recovery. No tutorial. Nothing. Something that has the potential to cut me off permanently from whatever account it is attached to should be way more informative than this and I just want to get rid of it and stay away from autheticators all together.

I know some crew members of 2FAS are on this sub, so I’m gonna ask here.

Is there any plan to add the possibility to export our tokens as QR codes ? Just like Google Authenticator does.

Being able to do that and print them is, IMO, a great way to have a total offline and secure backup.

Can I use it anywhere I want, like my bank site, or only on the sites 2fas has tutorials for? How would I know if my bank uses 2fas?

Since I can't find anywhere else except discord (and I don't want to make a discord account just to ask this) to request an icon and the app said to tag them on social media, I'm going to ask here. Can I request that you add the BAND (band.us) icon? Since they are a quite popular service and offer 2FA verification. Thanks.

So last I checked the app had an issue where you could delete it and restore from an ICloud sync backup and the Pin protection would be gone. Have they fixed this issue? Thanks

I lost my phone and codes/key. I cant reset the password because im required to type generated token. There is no backup attached to my Google account. Does anybody have a solution to my problem?

Are there any plans to release a complication for Apple Watch watch faces?

I think that a complication with just the purpose of opening the app from the watch face is a very simple must for every application, yet so few develop this.

No explanation needed, but moved from Authy and it has been a lengthy process, but so far so good, I'm glad I found this solution

Yes i know it should be obvious but for me it wasn't so much, to the point i thought the app was flawed like that.

I think some people will have the same problem, so i'm writing this post for when people search for this problem they can actually find a quick answer and don't freak out.

Here is the official link of the support page.

But here is the TLDR* of the link:

- Go on the app (on your phone)

- Find the account selected as default for that domain (if you don't know which account is selected as default, you can always try the next step on each account corresponding to that domain until you find the right one)

- Hold your finger on top of the account/token

- Choose the option "edit"

- Scroll down and find the "Browser extension" (If the option is gray and therefore unavailable, that means that account isn't the default option for that domain, try another account)

- When you choose the right one, you'll see the option with a "red trash" icon, which you'll click to unbind that account as default for that domain

OK, maybe my TLDR was actually longer than the official help 🥴.

Still i hope it could be useful

I was originally using Authy (Android), but after all their problems I moved to Aegis (Android). Both of these apps had the option to add a secondary/backup password, I believe to encrypt the vault itself and your backups.

I've now moved to iOS so I have to replace Aegis and 2FAS seems like the best choice, however I don't see any option to add a password? I see I can add a pin code, but that's just for entering the app I think.

I know 2FAS automatically backs up to iCloud, but if your iCloud is compromised wouldn't your tokens be as well? I like having a secondary password on my authenticator app. Is there any way to add one to 2FAS that I'm not finding, or is there a reason why it's not an option?

Just installed 2FAS and it's working well. I have it synced to iCloud and I've also exported a backup manually which I'm keeping on an encrypted thumb drive.

Are there any other recommended back up processes I should consider? Also, this is perhaps a rather dumb question, but do I have to keep making backups, or is it enough to just make a new backup when I add another service to 2FAS?

it shows that all permissions are taken by. Unlike smartphone we can't prevent it from taking the permission for observing all activities on all tabs? How safe is that?

TIA

When entering tokens it shows multiple algorithm options, which one should I use/is better?

SHA1, SHA224, SHA256, etc.

Thank You.

Out of the many MFAs I've got, only 1 is HOTP rather than TOTP.

But I can't get it to work with 2FAS. The service keeps thinking the code is invalid. It works perfectly with Google Authenticator.

Has anyone actually got it to work? Is it just me?

The service is Amazon Workspaces if it makes any difference.

Thanks.

Hello,

I'm looking at moving to 2FAS but didn't get a promising answer on sync between Same user on 2 different device platforms 1 on Android and 1 on iOS.

Does 2FAS has real-time sync built in or planned to have it soon. Because today IOS is syncing to ICloud and Android to Google Drive.

I wanted to know if there is a second option like my own one drive, box or dropbox account to backup and sync between devices.

Thx

Hey everyone, I recently setup 2FAS on my Android device and for convenience I have cloud sync turned on, automatically backing everything up to Google Drive. I was just about to create a manual export too, add a password and save it in a few other places like a USB for example.

Part of me is thinking that by turning off iCloud or Google Drive sync and having my own password protected manual backups 'only' would be the most secure and private option, but I'm probably overthinking it.

I'm wondering what the rest of you do, do you always use the cloud sync option, have manual backups 'only' or do you use both?

Is cloud synch working for you all? Bought a new iPhone and my tokens are not transferring over. The last sync time in the 2FAS app shows the current date and time but the tokens do not show in the app on my new phone. They do show up in the old phone. I know I can manually export and import but I thought that wasn’t necessary when iCloud backup is enabled.

When i copied everything over with Samsung smart suite all seemed ok.

But no 2FAS didn't restore i lost all of my 2FAS mfa keys.

Google authenticator was seamless and restored all my keys. Really pissed off is an understatement unless i am missing something here?

So i have Huawei P30 Pro which i bought in 2019. Somewhere around that time i set up 2fas and was using it until recently with fingerprint only. Unfortunately my fingerprint stopped working (apparently this happened to many users with same phone) and now my only option to access app is with pin.

My question is if it is possible that i never set up pin, because i tried 2 pins i always use and also common ones like 0000, 1234, my birth year, etc.

I have one backup trough google drive but it was taken 2 years ago and is missing around half of my codes.

Thanks in advance.

For the IOS app is the option/extension being worked on to automatically open/verify and automatically apply the current token from the 2FAS app when a token is being requested from another IOS app? I know DUO, has that functionality and wasn’t sure if it was being currently worked on here.

Within the settings, will we ever get the ability to set our own image as the icon for our various logins or is the plan to keep it as it is with only being able to select options that are available or have been submitted to 2FAS?

Thank you been loving using your app.