Bitwarden just launched a new authenticator app. Here’s what it means to users. | Bitwarden Blog
bitwarden.com
Storing 2FA codes is just the beginning. Bitwarden aims to add defense in depth to authentication.

Bitwarden Authenticator is a standalone app that is available for everyone, even non-Bitwarden customers.

In its current release, Bitwarden Authenticator generates time-based one-time passwords (TOTP) for users who want to add an extra layer of 2FA security to their logins.

There is a comprehensive roadmap planned with additional functionality.

Available for iOS and Android

      • lemmyvore@feddit.nlEnglish
        0·
        2 months ago

        Nothing, but this particular alternative is pretty awful. Literally zero features besides TOTP code generation, and they don’t plan to make it better. I really don’t understand why this app exists.

        The only people who would possibly care about it is existing Bitwarden users who want to use it to hold the code for their Bitwarden account independently from account. But they say they plan to add Bitwarden sync to it so?..

        Honestly it just looks like a super lazy attempt to draw people to Bitwarden (assuming it doesn’t turn into a sleazy attempt of holding codes captive with no way to get them out).

  • fluckx@lemmy.world
    0·
    2 months ago

    Weird. If I copy the TOTP code from bitwarden into their 2fa app I get different codes. Not even after a rotation ( one isn’t ahead of the other ). That doesn’t seem right :/

    • Mountaineer@aussie.zoneEnglish
      0·
      2 months ago

      TOTP is a defined standard, specifically RFC 6238.
      But I still have 3 different apps on my phone so that I can get on to various customer VPNS. 🤷‍♂️

      • lemmyvore@feddit.nlEnglish
        0·
        2 months ago

        Microsoft MFA has the option of being set up (by admins) with either standard TOTP or with their proprietary algorithm.

        If the admins for the realm you’re trying to use have chosen the proprietary one you need to use the Microsoft Authenticator app. Regular TOTP generators will accept the code but the code they make won’t work.

        Can the regular Bitwarden generator make good codes? If so, it means they figured out (or were told by Microsoft) how the proprietary algorithm works. But since this standalone app is open source they couldn’t add that algorithm to it.

        • fluckx@lemmy.world
          0·
          2 months ago

          My main issue is that if I add the bitwarden TOTP secret string manually multiple times its generating different codes between the entries. Which seems like something that shouldn’t happen.

          It is a different format to the other ones I’ve got though.

          Fuck Microsoft authenticator though. Had to restore it to a new phones once and if you don’t do it on initial startup you can’t restore it at all. Good thing I had a secondary app that still had them. Absolute garbage.

    • lemmyvore@feddit.nlEnglish
      0·
      2 months ago

      No export either, just Google Backups.

      Also the feature roadmap looks bad. They don’t plan to add any of the features you’d expect from a standalone 2FA app, they just plan to sync with Bitwarden and eventually integrate completely with Workforce. So it looks like a bait and switch with no way to get your codes out.

  • archer@lemmy.ml
    0·
    2 months ago

    Is there a FOSS 2FA app that syncs between Linux, MacOS and Android (using a self-hosted Server)?