I migrated to 2FAS, which is open source, free and has a nice UI. Used Authy for ages and just switched. Recommended…

https://2fas.com/

But it also only has mobile apps. Authy is only killing the desktop app, not the mobile ones - at least not yet.

What does 2FAS give, genuinely curious in case I'm missing something..

There's a browser extension: https://2fas.com/browser-extension/.

it still requires you to reach your phone

How was the migration?

Password Store works fine for me: https://www.passwordstore.org/

https://github.com/tadfisher/pass-otp

Others have also said Bitwarden isn't too bad: https://bitwarden.com/

> https://github.com/tadfisher/pass-otp

Seconded. The jerk maintainer needs to cut a release though. And maybe port it to something other than bash.

Don't be too harsh on him, he's doing his best :D

(Seriously though, thank you, it's been incredibly useful so far!)

I see other replies also recommending password managers

Why would I store my second authentication factor alongside the first? Aren't we effectively now back to 1FA?

I'd say password managers are a (slightly weaker) form of 2FA by design: it's something you have (a device with your password database installed) plus something you know (if using a master password) or something you are (if using biometrics).

Adding TOTP on top of that helps guard a bit more against some kinds of attacks. You can make it even stronger by not storing those keys in the same place and only using your phone, for example, but for some people (myself included) it's one bit too inconvenient. The good thing about using TOTP for 2FA is that you can find your own balance between convenience and security.

I just tried adding to KeePass XC - worked well, generates the same OTPs.

1Password

KeePass databases with KeepassXC. I like to use Strongbox on macOS/iOS though (still save to Keepass databases though so I don't have to depend on Strongbox).

The easiest thing to do is set up a 2FA mule.

Aegis 2FA