Jump to content
Bill Rossum

Google Authenticator 2FA Implementation

Recommended Posts

Google Authenticator 2FA Implementation

Hi,

First off, I would like to start by saying I love the product and I use both the desktop and paid mobile version. I think it would be great if there was something built into Enpass that could replace Google Authenticator, something that is able to store your 2 factor authentication secrets, and then display and copy the codes. In the past when ever I've dealt with Authenticators, it has always been a struggle to keep the secrets synced between devices, and I know this is a strong point for Enpass. I think this could be a feature that would draw a lot of people to Enpass.

Thank you for your consideration.

Share this post


Link to post
Share on other sites

Just remember that storing your first factor along with your second isn't conscidered good practise.

The shared key for generating TOTPs is reversible to cleartext to (be able to sync ofc.). One could argue that its overkill to protect it further since its already within the vault which already is protected.

But still, having your one-factor vault compromised would result in breach for your two-factor logins, if stored together :-)

Share this post


Link to post
Share on other sites
On 10/4/2019 at 2:48 PM, nonchiedercilaparola said:

hi, i'm trying to use TOTPs field but the numbers are wrong or not valid. 

p.s. i found this url https://www.enpass.io/support/kb/general/does-enpass-support-two-factor-authentication-2fa/ where  it say that 2fa isn't supported...where i'm wrong?

It doesn't support 2FA for login to Enpass itself, but it DOES support 2FA for its record (login, etc). 2FA = TOTP on enpass, if your code doesn't work, try adjusting your clock to make sure it accurate. I personally use TOPT on enpass.

Try again and make sure you scan the correct TOTP code.

Try here: 

https://www.enpass.io/docs/manual-desktop/totp.html

https://www.enpass.io/docs/manual-android/totp.html

Edited by mrSLK

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...