August 11, 20178 yr Google Authenticator 2FA Implementation Hi, First off, I would like to start by saying I love the product and I use both the desktop and paid mobile version. I think it would be great if there was something built into Enpass that could replace Google Authenticator, something that is able to store your 2 factor authentication secrets, and then display and copy the codes. In the past when ever I've dealt with Authenticators, it has always been a struggle to keep the secrets synced between devices, and I know this is a strong point for Enpass. I think this could be a feature that would draw a lot of people to Enpass. Thank you for your consideration.
August 12, 20178 yr Author Wow, thanks for telling me. I had no idea that this already existed. Great job team.
August 12, 20178 yr Just remember that storing your first factor along with your second isn't conscidered good practise. The shared key for generating TOTPs is reversible to cleartext to (be able to sync ofc.). One could argue that its overkill to protect it further since its already within the vault which already is protected. But still, having your one-factor vault compromised would result in breach for your two-factor logins, if stored together :-)
October 4, 20196 yr hi, i'm trying to use TOTPs field but the numbers are wrong or not valid. p.s. i found this url https://www.enpass.io/support/kb/general/does-enpass-support-two-factor-authentication-2fa/ where it say that 2fa isn't supported...where i'm wrong? Edited October 4, 20196 yr by nonchiedercilaparola
October 27, 20196 yr On 10/4/2019 at 2:48 PM, nonchiedercilaparola said: hi, i'm trying to use TOTPs field but the numbers are wrong or not valid. p.s. i found this url https://www.enpass.io/support/kb/general/does-enpass-support-two-factor-authentication-2fa/ where it say that 2fa isn't supported...where i'm wrong? It doesn't support 2FA for login to Enpass itself, but it DOES support 2FA for its record (login, etc). 2FA = TOTP on enpass, if your code doesn't work, try adjusting your clock to make sure it accurate. I personally use TOPT on enpass. Try again and make sure you scan the correct TOTP code. Try here: https://www.enpass.io/docs/manual-desktop/totp.html https://www.enpass.io/docs/manual-android/totp.html Edited October 27, 20196 yr by mrSLK
Create an account or sign in to comment