Google Authenticator 2FA Implementation

[Bill Rossum]

Google Authenticator 2FA Implementation

Hi,

First off, I would like to start by saying I love the product and I use both the desktop and paid mobile version. I think it would be great if there was something built into Enpass that could replace Google Authenticator, something that is able to store your 2 factor authentication secrets, and then display and copy the codes. In the past when ever I've dealt with Authenticators, it has always been a struggle to keep the secrets synced between devices, and I know this is a strong point for Enpass. I think this could be a feature that would draw a lot of people to Enpass.

Thank you for your consideration.

[Ivarson]

There already is? 

 

Add a field to existing item and choose TOTP

[Bill Rossum]

Wow, thanks for telling me. I had no idea that this already existed. Great job team.

[Ivarson]

Just remember that storing your first factor along with your second isn't conscidered good practise.

The shared key for generating TOTPs is reversible to cleartext to (be able to sync ofc.). One could argue that its overkill to protect it further since its already within the vault which already is protected.

But still, having your one-factor vault compromised would result in breach for your two-factor logins, if stored together :-)

[nonchiedercilaparola]

hi, i'm trying to use TOTPs field but the numbers are wrong or not valid. 

p.s. i found this url https://www.enpass.io/support/kb/general/does-enpass-support-two-factor-authentication-2fa/ where  it say that 2fa isn't supported...where i'm wrong?

Edited October 4, 2019 by nonchiedercilaparola

[nonchiedercilaparola]

news?

Edited October 11, 2019 by nonchiedercilaparola

[mrSLK]

On 10/4/2019 at 2:48 PM, nonchiedercilaparola said:

hi, i'm trying to use TOTPs field but the numbers are wrong or not valid. 

p.s. i found this url https://www.enpass.io/support/kb/general/does-enpass-support-two-factor-authentication-2fa/ where  it say that 2fa isn't supported...where i'm wrong?

It doesn't support 2FA for login to Enpass itself, but it DOES support 2FA for its record (login, etc). 2FA = TOTP on enpass, if your code doesn't work, try adjusting your clock to make sure it accurate. I personally use TOPT on enpass.

Try again and make sure you scan the correct TOTP code.

Try here: 

https://www.enpass.io/docs/manual-desktop/totp.html

https://www.enpass.io/docs/manual-android/totp.html

Edited October 27, 2019 by mrSLK