2FAuth - is a mystery...

[LoudLemur]

I think this application could benefit from some more explanation on how to use it.
Many are familiar with 2FA (Two Factor Authentication), where in addition to providing a passphrase, you are required to additionally e.g. paste in the solution to a complicated sum in a limited amount of time.

How do we connect 2FAuth to some other application? Could we have a worked example with e.g. another Cloudron supported application?

[jdaviescoates]

I've not looked at it yet, but isn't it just an open source self hosted web based alternative to Google Authenticator, Microsoft Authenticator and existing open source Android apps like FreeOTP+

Presumably it basically works pretty much exactly like those do, no?

[jdaviescoates]

@jdaviescoates said in 2FAuth - is a mystery...:

FreeOTP+

It doesn't seem to yet support the exports from FreeOTP+ which is frustrating.

Reported here: https://github.com/Bubka/2FAuth/issues/322

[LoudLemur]

Please, somebody, make it do something!

[RazielKanos]

maybe you wanna check out vaultwarden, it also offers 2fa, but much more in addition as well

[LoudLemur]

@RazielKanos Yes, I was thinking about Vaultwarden. It already has 2FA, so I was wondering how 2Fauth might be able to assist it. Vaultwarden doesn't seem to need 2Fauth, so I then started wondering, which Cloudron supported application actually could make use of 2Fauth.

[timconsidine]

@LoudLemur it’s working for me.
Still in process of moving accounts from Authy (can’t see how to export from Authy)

Process is pretty similar to any other 2fa app.
On target site, add auth and get a QR code.
I usually take a screenshot of this and upload it into the 2faAuth app, name it, enter confirmation code in target app, optionally assign the new account in 2faAuth to a group.

I agree the UI in 2faAuth is not perfect but it is clear enough.

[LoudLemur]

Which Cloudron supported application could make use of 2Fauth?

[jdaviescoates]

@LoudLemur said in 2FAuth - is a mystery...:

Which Cloudron supported application could make use of 2Fauth?

Any that support setting up 2FA, e.g. GitLab, probably loads of others.

But it's not really the apps making use of it, it you using it to generate your 2FA codes to login to those apps.