Hacker News Reader

Great counter-point, it's not as black and white as it seems.

Google's own 2FA app (Google Authenticator) doesn't even let you export your keys.

Actually the newest version does allow export. For years it was true you couldn't export. But now they allow you to export. Thankfully.

Though I tend to use U2F. With Yubikeys and other U2F keys. I use my Yubikey to store a backup of the TOTP (Authenticator type) codes. I also set a password and touch required to generate the codes.

If you're talking about importing/exporting your list of 2FA codes, I think they've added it

They have! But only via QR codes (multiple, if needed). It's clearly meant to help migrate your TOTP secrets to a new phone.

Have they? I can't see it on their IOS App version 3.01. It's only had two updates in 4 years for cosmetic stuff.

Reply on news.ycombinator.com