With bitwarden changing to at least email auth required, I’m one of those that stores my email creds there. I don’t want to risk losing my email so it seems I need to use an Authenticator. For work, I have microsoft auth but that makes me want to die a little.
EDIT: I appreciate you all, thank you.
Aegis is nice
Can confirm. It does everything you’d want it to do.
One more upvote for aegis
I switched from Google Authenticator to Aegis and have had no problems.
Been with aegis through 4 devices and absolutely love it.
thanks for this!
Aegis via Fdroid
The fact it’s in fdroid is great
I use Aegis for personal and work stuff. Works great, is open source and initiates no network connections anywhere.
Aegis (fdroid)
I use FreeOTP. Open source tickles me.
Nitrokey or yubikey if you have the key , or Aegis if only want to use an app
I think I need an education. What do you mean if I have the key? When I look at bitwarden settings, I do see a setting for “Log in with passkey” but it’s different than the Two-step login. EDIT: wait, I think I see, under the two-step login there are providers for Authenticator app, Passkey, yubico key, or duo. I think I get it now.
yubikey and nitrokey are physical keys
Aegis.
I’ve used andOTP for years and it’s served me well. and it’s FOSS
deleted by creator
I did not realize that. Im trying out Aegis and it seems like a good replacement so far.
deleted by creator
whatever you choose, keep the 2FA recovery codes to at least bitwarden on paper, in a safe place
Yubikey + Yubico app covers all my needs and is technically the most secure option
I used tobuse authy. Mainly for the desktop to phone sync feature. The desktop got removed unfortunatly. So i am looking as well
I use LastPass authenticator for 2fa (note, I do not store any passwords in LastPass)
This way the authenticator accounts sync to my LastPass account and make device migration a breeze, I simply just sign into LastPass and then I can use authenticator immediately on the new device.
You could also use Microsoft authenticator (again with no passwords saved) to achieve the same thing.
I just didn’t want to bother with exporting and importing 2fa accounts when getting a new phone. Or worse, if my phone fails unexpectedly I don’t want to be unable to generate codes.
This is really sold advice
I typically use Bitwarden for my 2fa keys and passkeys. For Bitwarden itself, I have a Yubikey and my phone registered as passkeys. I also used to use Duo for 2fa in the past, but I prefer Bitwarden.
I did not realize they had an authenticator… That would be convenient. I think I’ll do that.
I second Bitwarden. It’s open source and automatically copies the number to your clipboard. Migrating can be a pain in the ass but once you’re done, it’s great.
whatever you choose, keep the 2FA recovery codes to at least bitwarden on paper, in a safe place
If you already have Microsoft authenticator just use that. They’re all basically the same
