@malwaretech Speaking of authenticators, is Microsoft's any better? I was under the impression that it backs up the codes to your Microsoft account, but when I switches phones, while it did pull the accounts, I had to re-register all 2FA codes…
@jernej__s@malwaretech I don't now about Android, but on iOS MS Authenticator defaults to backing up your keys to iCloud. I haven't actually had an occasion to test this yet, though.
@kaelef@jernej__s@malwaretech the iOS backup is all well and good until you want to switch over to Android, I found it was impossible to export/transfer the TOTP seeds and had to set them up again from scratch...
@jernej__s@malwaretech Microsoft’s didn’t originally back up, but does now. However if your Authenticator instance predates the sync option I don’t think it turns on. It’s a high bar to get users to buy security keys, but I genuinely think that passwordless sign in with keys - especially as you can have a second in your file cabinet at home - is easiest for users and I encourage it whenever I can.
@jernej__s@malwaretech I find the MS one works well. There are usually a couple of accounts I need to resync after a restore but the vast majority just work
@jernej__s@malwaretech MSFT is actually worse here. You know how with most auth apps the flow is "turn on 2FA, scan the QR, enter the code"? Their flow is not that and I suspect it's different due to someone at MSFT thinking they're clever, which to me is akin to rolling your own crypto.
@jernej__s@malwaretech You can export verified IDs from MS Authenticator. (Settings / scroll to the bottom / Export Verified IDs) It's kind of a convoluted process, requiring you to write down a 12 word seed phrase, and you need to repeat it after every change or addition...