Two factor authentication

[smilodon]

I've no idea when this was added but you can now secure your account with two factor authentication. If you don't then ask someone to slap you, hard, you deserve it!

:narnar:

[Liberator]

So what app are people using for 2FA.

There seem to be a few,

Google (free) - But needs another app to scan QR codes that needs access to your contacts and no backup.
Authy (free) - Not open source and stores encrypted keys, but on it's own servers. Pin lockable.
FreeOTP (free) - Fully open source, simple, but no backups
Authenticator Plus (£2.49) - Covers pretty much everything, multiple device sync from encrypted backups on DropBox or GoogeDrive, Pin lockable.


  I like the idea of FreeOTP but it has no backup function, Authenticator Plus looks like it does everything well and allows backups as well as being able to pin lock the app, works with Battle.net as well.

[BrotherTobious]

Using the google one myself

[smilodon]

I use Googles Authenticator.

It requires a barcode scanner to work and for that I use Barcode Scanner. It's an open source project with all the code available on Github. I've checked the permissions and Barcode Scanner offers a feature that allows you to create your own barcodes and QR codes for things like apps, contacts i.e. the address of your favorite restaurant, interesting bookmarks you've found etc.

It also has a nice feature that lets you scan a QR code and add it to your own bookmarks. For example I saw a poster recently about a big event happening in London. The printed poster had a QR code on it that I could scan and add to my mobile bookmarks.

A final great feature is that the app can scan a QR code for WiFi info and log you into public wifi networks. A local Coffee Shop I use, rather than have just their WiFi name and password on a sign that I need to manually add, also have a QR code underneath. So all I needed to do was scan the code and I was connected to the coffee shop WiFi.

All this happens on the phone and nothing gets sent back to a server etc. It's all in the open source code.

As for backups most sites and definitely CIG, provide one time backup codes that you can  save to your Secure Notes in Lastpass. So if the Authenticator craps-out I can use a backup code. Never happened before but it's there if need be.

[Twyst]

I use Google Authenticator as well.
The barcode scanning is better than the RSI one which requires a 3rd party barcode scanner.

[smilodon]

Yeah Google Authenticator had an update that now includes it's own scanner.

[TeaLeaf]

Ditto, GA for me too.