Btw: Mastodon lets you use two-factor authentication (e.g. with Google Authenticator, Yubico Authenticator, ...)

I'd recommend making use of it to protect your account.

#mastodon #security

@thomas Die 2FA wollte ich auch einrichten. Habe aber noch nicht gefunden, wie / wo das geht.

Kann jemand helfen?

@thomas A great reminder. Easy for people to overlook/forget about when they sign up to something motivated primarily out of a "I'll just check it out" mindset.
@thomas this! two factor authentication is a perfect way to protect your accounts. I love Aegis as authenticator app (https://getaegis.app/): free and open source!
Aegis Authenticator

Aegis Authenticator is a free, secure and open source app for Android to manage your 2-step verification tokens for your online services.

@thomas I recently switched phones and was pleasantly surprised to find out that Google Authenticator now allows you to transfer your saved accounts to a new device with QR codes. I try to use 2FA everywhere so it used to be a major hassle to switch phones.

So for Android users at least I can highly recommend Google Authenticator as the code generator.

@jakeRaccoon

@thomas

Authy and Bitwarden are good alternatives as well. I'm just happy to see mfa hitting some reasonable mainstream finally!

@thomas I've set mine up with my Google Pixel phone (which has Titan Security), a Yubikey and Windows Hello: physical security for the win!
@thomas It even works with the passkey function in iOS 16. It's not passwordless, but after entering your password, when it prompts to use a security key if you click 'Use Security Key' on the web page and then (in windows anyway) click cancel on the security key pop up dialog, it will offer the option to use a device that reads QR codes as the security key. Choose that, scan the code with the phone the passkey is on, and you're in. (Hopefully the passkey process gets smoother over time :) )