Join Nostr
2026-10-28 21:06:39 UTC

jonny (nonvenomous) on Nostr: > phone suddenly dies > need to recover all my 2fa shit > most of it is TOTP in ...

> phone suddenly dies
> need to recover all my 2fa shit
> most of it is TOTP in password manager. fine! done!
> employer uses Duo because "more secure"
> can't login to enroll new phone because old phone dead, can't do duo auth.
> duo allows you to use text message 2fa to the "manage devices" menu
> duo defaults to allowing push approval from the locked homescreen

TOTP: simple, free, easy to recover, easy to implement, i can control it and make sure password required to access it
Duo: opaque corporate spyware, can get taken over by getting sim swapped, can auth from a stolen phone

security!