What does HackerNews think of andOTP?

[Unmaintained] Open source two-factor authentication for Android

Language: Java

#5 in Android
I love F-Droid and try to use apps from there whenever possible.

I did recently discover that andOTP is no longer maintained, though. I've switched to Aegis since.

https://github.com/andOTP/andOTP

I use andOTP[0] which auto-exports an encrypted backup to a local folder, which is then synced with Syncthing[1] to my NAS.

It's seamless and doesn't need an internet connection.

- [0]: https://github.com/andOTP/andOTP

- [1]: https://syncthing.net/

I was happily using andOTP but seems like it has been unmaintained since June - https://github.com/andOTP/andOTP.

I wish F-Droid or Play Store had a feature like GitHub's 'Archived' to inform users.

> archived

https://github.com/andOTP/andOTP

(And yep, I found out about Google Authenticator the hard way, trying to transfer from my previous phone!)

I use andOTP[1] installed via f-droid. You can easily get a backup file with your codes.

[1] https://github.com/andOTP/andOTP

Seconding andOTP[1] or Aegis,[2] if you're looking for an Android app that only handles OTP authentication. Both of these apps allow file-based import/export so that you can back up your codes and restore them elsewhere, no proprietary cloud service needed.

[1] https://github.com/andOTP/andOTP

[2] https://getaegis.app/

I'm not impressed with Authy's privacy policy, especially this part which mirrors the Google issues:[3]

> We use the information we gather from you to monitor for unusual or suspicious activity in your account, to communicate with you about your account, and as additional information that can be used to validate who you are if you need to recover your account or your account has been or may be compromised.

Authy also collects and shares more of your private information than most OTP apps:[3]

> When you use our app we collect: Your phone number, device information, and email address.

> We also share your information with our third party service providers as necessary for them to provide their services to us. We may also have to share your information with third parties if required to do so by law.

> Your information will be transferred to the U.S.

[3] https://www.twilio.com/legal/privacy/authy

On Android, andOTP is good.

It is open source, maintained, easy to use, can do backups and re-present the QR code so you can easily scan it with another device.

https://github.com/andOTP/andOTP

I personally use andOTP [0] which I'm a fan of. I've been thinking of switching to aegis [1] for nothing more than a UI change.

[0]https://github.com/andOTP/andOTP

[1]https://github.com/beemdevelopment/Aegis

Do you mean you use something like grencode to literally draw the QR code using Unicode box characters or do you just decode and save their contents?

As an extra suggestion: if you use an Android phone for OTP, [andOTP](https://github.com/andOTP/andOTP) supports exporting directly into a PGP-encrypted JSON file which can then be either imported back into the app or converted back to QR codes with a script.

Since it allows you to trigger the export using a Broadcast Intent, I have it set up to do that as a part of my weekly backup Tasker script (of course, you could also just use any other sync solution and manually export when you add a new code).

Doesn't help you now but I can highly recommend AndOTP [1]. It's an opensource OTP app with support for encrypted backups/restores for your 2FA codes.

[1] https://github.com/andOTP/andOTP

Any thoughts on something like andOTP (https://github.com/andOTP/andOTP), where you can make backups of your 2FA's?