Hacker News Reader

Comment by PascLeRasc | Hacker News Reader

Authy requires a phone number, which you may or may not want to give out, but it also lets that phone number restore backups, so it’s vulnerable to SIM swaps.

Also it’s ugly and super high latency to navigate, but that’s just my opinion.

View on HN

"but it also lets that phone number restore backups" - is this true? I use Authy and can use a phone number to connect a new device to my account, but to restore access to credentials on the new device I need to enter a passphrase. I don't think there's a way to restore credentials with just a phone number, but will need to check.

Edit: the following article appears to confirm my beliefs: https://support.authy.com/hc/en-us/articles/360036580453-Rec...

Without the backup password, you won't be able to restore a backup.

You can disable the multi-device capability of Authy to lock it to a specific set of devices e.g. primary and a backup burner if that's your thing.

Yep, I can add that backups in Obsidian are automatically managed and stored on the iCloud Keychain, hence accessible just by using the app on any device

Just yesterday I thought it’d be great if Authy used iCloud instead of their own backend for storage. Thank you for building this.

Can I import my OTPs from Authy?

I haven't been using Authy for years, last time I checked there was no easy way to export data from it (they want to keep you tieeeed!), but hopefully things have changed.

You would only need to edit/export the "secret" and copy/paste it to Obsidian, in case they allow it.

Reply on news.ycombinator.com