Windows based authenticator apps - alternative to Authy?

Lum · May 15, 2024

I use 1Password to keep track of my passwords. From what I understand, it also has built-in features for authentication.

bfieldman · May 31, 2024

I came here searching for the same solution, and I think I may have found it.

I use Aegis for TOTP on my Andoid phone, and keep the TOTP keys stored in a keepass database.

It turns out, the Windows Keepass app, KeepassXC, has a TOTP generator. You right-click on a db entry, select <TOTP>Set up TOTP>, paste in the key. Then return and do the same with <TOTP>Show TOTP> to get the code. Or, you can even select <TOTP>Show QR code> to install it on another authenticator app. And, since you have the secret key stored, you have a backup in case you lose your phone.

Here's some more info: In-depth tutorial: How to set up 2FA TOTP with KeepassXC, Aegis and Authy.

Does anyone see any downside here?

kelper · May 31, 2024

I use an authenticator that syncs between all my devices - Windows and Android. It fills in username, password and 2FA / TOTP.

It's also Mac/iOS compatible but I don't own any of those.

Roboform is free on one device and $2.49 a month for unlimited devices. As it is also an excellent password manager it's good value.

RH247a · Dec 20, 2024

therev said:
Just seen this. I've been using WinAuth for several years - and you can backup and clone securely!

You can use an encryption key to create backups (or if you prefer, a password) which is a good way to make sure you don't risk losing all the secret codes you need - and then save this to a cloud storage location. It's all within your control (and I use a PGP/GPG key created using Kleopatra etc).

If you export locally in plain text, you can see it saves base64 encoded icons as well, which means when you install on another device it comes with the icons. After secure transfer, you can then import the export into your phone OTP generator (I use Aegis now) on Android. It doesn't bring in the icons - I'm trying to work out if I could do that ... Aegis handles images slightly differently.

My only hesitation with WinAuth is that it hasn't been updated for a long while. FWIW I also wish it had a search function in it.

Thanks for the info: Have a couple of questions on WinAuth.
1. At another site I read the below paste (what exactly does this mean?)
WinAuth doesn’t allow users to produce two-step verification codes for all the accounts. You can do so with these accounts ONLY
->Google, Microsoft, Net, Guild Wars 2, Glyph/Trion, Steam.

2. Are what part of the process are you using the PGP/GPG key ?

RH247a · Dec 20, 2024

bfieldman said:
I came here searching for the same solution, and I think I may have found it.

I use Aegis for TOTP on my Andoid phone, and keep the TOTP keys stored in a keepass database.

It turns out, the Windows Keepass app, KeepassXC, has a TOTP generator. You right-click on a db entry, select <TOTP>Set up TOTP>, paste in the key. Then return and do the same with <TOTP>Show TOTP> to get the code. Or, you can even select <TOTP>Show QR code> to install it on another authenticator app. And, since you have the secret key stored, you have a backup in case you lose your phone.

Here's some more info: In-depth tutorial: How to set up 2FA TOTP with KeepassXC, Aegis and Authy.

Does anyone see any downside here?

Thanks for the info. I already use these for Pswd Managers, think I will look into this. As you're probably are doing I'd think it prudent to set the settings to run more than one instance of KeePass and have separate DB file and Pswd for the TOTP. I surmise you'd have to manually update the Accts to or from your phone. Other than that do regular mirror sync backups daily to a USB drive or maybe look into storing encrypted backup to secure end to end encrypted storage site.

Kees · Dec 20, 2024

RH247a said:
WinAuth doesn’t allow users to produce two-step verification codes for all the accounts. You can do so with these accounts ONLY
->Google, Microsoft, Net, Guild Wars 2, Glyph/Trion, Steam.

I don't know what that means, but I am successfully using WinAuth 3.5.1 (.NET 3.5) (2016-06-07) for 2Fa in ElevenForum and in another (Dutch) forum.
No other purposes needed until now, so I did no tests with other apps.

pokeefe0001 · Dec 20, 2024

RH247a said:
...
WinAuth doesn’t allow users to produce two-step verification codes for all the accounts. You can do so with these accounts ONLY
->Google, Microsoft, Net, Guild Wars 2, Glyph/Trion, Steam.

I was very confused about this at first, but I knew those could not be the only accounts supported so I tried clicking on what looks like a header: "Authenticator". That brought up a display that lest you enter stuff for an arbitrary account. I think it would have been much more obvious if they had an "Other" button at the bottom rather than "Authenticator" at the top. They forgot to ask me when they were designing their display.

Windows based authenticator apps - alternative to Authy?

Lum

Member

My Computer

System One

bfieldman

New member

My Computer

System One

kelper

Well-known member

My Computers

System One System Two

RH247a

New member

My Computer

System One

RH247a

New member

My Computer

System One

Kees

Well-known member

My Computer

System One

pokeefe0001

Well-known member

My Computer

System One

Similar threads

Latest Support Threads

Latest Tutorials