@feditips Aegis authenticator.. And firewalled, so no outgoing connection is allowed from the app

@feditips Google Authenticator. Clean, tiny, and simple to sync among devices.

@feditips or you just use a decent password…

@feditips FreeOTP+

@feditips @ente auth or @bitwarden

@feditips If you’re on an Apple device running iOS/iPadOS 16 or macOS 13, you can register a passkey as a second factor. Click the link to add a security key, and your device should prompt you to add a passkey (if you have iCloud Keychain enabled).

@feditips Aegis and KeepassXC are working fine for me. Both can handle 2FA TOTP Codes.

@feditips BitWarden supports TOTP, though if you're using their cloud service it requires a paid plan, IIRC. I'm not sure where the self-hosted version lands.

@feditips

But don’t you have to go through that God-awful rigmarole of waiting for a request for authentication every single time you log on ?

I’d just stop tooting.

@feditips technical question: does that also work if the server is using ldap for login? Because I don't see the option, but maybe I can get it to work somehow? (I'm running my own instance)

@feditips OK, so mastodon's giving us the secret, but:

We're missing a detailed description about the way to manually set up 2FA, & also about masttodon's configuration of 2FA: What are accepted code-length, hash algorithms, time span? And which are safest & working best?

@feditips

@Fascinatorfun @feditips

So apparently the only way to add 2FA to Mastodon is to use Yet Another(tm) third-party “app”

So that third party - someone unknown to me otherwise- has my phone number *and* all the 2FA transactions I conduct using that app

Why not just send an SMS/text directly to my phone, like my banks and eleventy-dozen other places do

Why drop an app in there at all?

@feditips I dont seem to see the 2FA options at mstdn.ca?

@feditips Bitwarden also has a great built in option

@feditips I use keeper as a password saver
It has built in 2FA which generates codes.

@feditips I use the Yubico Authenticator because I'm Properly Paranoid. You need to physically have the security key to plug into your phone or computer to get a code.

@feditips

But it still *only* allows for 2FA by phone. Anyone without a phone is just… well, too small a group to consider, maybe?

@feditips I never used 2FA because I worry that it would be taken from me like Musk took it away and people couldn't log into their accounts cause of it