Aegis Authenticator, a decent alternative to Google Authenticator and Authy

[mk4]

Disclaimer: I am in no way affiliated with Aegis Authenticator, and I have no monetary incentive in sharing it. I just found this a week ago on Reddit and after using it for a week with having no bad experience(so far), I just decided to share this here for the daytraders who needs to leave funds on exchanges on the daily.

Advantages over Google Auth:

• Slick, modern UI
• Open source
• Local backup feature(.json file)
• AES-256 Encryption, password lock

Disadvantages:

• Currently Android only. If you're on iOS, probably lookup FreeOTP(also open source)

Website: https://beem.dev/
GitHub repo: https://github.com/beemdevelopment/Aegis
Google PlayStore: http://play.google.com/store/apps/details?id=com.beemdevelopment.aegis
F-Droid: https://f-droid.org/en/packages/com.beemdevelopment.aegis

Why not use Authy? If having your 2FA backups stored on a company's servers is fine with you, then by all means go with Authy. But if you prefer storing your 2FA backups yourself, through an encrypted flashdrive and such, then try out Aegis.

[Casdinyard]

Thanks for the heads up, I was actually looking for alternative.

Just downloaded it and easily imported all my files. Btw, the fingerprint unlock feature is cool!

[o_e_l_e_o]

Nice find.

I've been using andOTP for as long as I can remember, and it does everything that Aegis seems to do. You can compare the "Features" list from their readme.md files and see they are very similar:

https://github.com/beemdevelopment/Aegis
https://github.com/andOTP/andOTP

Unfortunately andOTP has recently been removed from the Google Play Store for not using Google's in-app payment system (https://github.com/andOTP/andOTP/issues/396). You can still download the .apk from their github, but for users who don't want to do that, Aegis looks like a good alternative. I'm not sure it offers anything different enough for me to go through the hassle of making the switch, though.

[judeafante]

I might replace my old Google Authenticator for this one, it's open sourced and password protected, what can you more, I am not comfortable using Google's version because of lack of security and not being open sourced, this is Google of course they own it and they can have an access on it, something that I'm afraid could happen in the future.

[mk4]

Yeap! That works too. I personally just prefer Aegis over andOTP because I've done web design in the past hence I'm quite picky in terms of UI and UX design. Material design and such. It all boils down to personal preference though.

EDIT: Also by the way, if you have a rooted android phone, you can import your 2FA codes from Authy, FreeOTP, Google Authenticator, etc, to Aegis.

Screenshot from their PlayStore page

[mk4]

I just wonder if the local backup is also encrypted.

The app's local storage itself can be encrypted with a password via the settings. If you do a backup though, the exported .json file is not encrypted. In fact, you can open the backup file and you can view the 2FA keys there, hence it's not a great idea to leave the backup unencrypted on your phone/computer's storage. It'd definitely be a good idea to VeraCrypt-ify the backup.

[AverageGlabella]

Thanks for the heads up, I was actually looking for alternative.

Just downloaded it and easily imported all my files. Btw, the fingerprint unlock feature is cool!

It might be a cool feature but is not the most secure option a long pin is better than any fingerprint unlocking system. If you are looking for the most secure authentication app then you should be looking at your own habits and secure it via a secure pin instead of using a finger print to access the codes.

[mk4]

Thanks for the heads up, I was actually looking for alternative.

Just downloaded it and easily imported all my files. Btw, the fingerprint unlock feature is cool!

It might be a cool feature but is not the most secure option a long pin is better than any fingerprint unlocking system. If you are looking for the most secure authentication app then you should be looking at your own habits and secure it via a secure pin instead of using a finger print to access the codes.

The finger print unlock is just an option that you can turn on via the settings. If you want to be more secure without minding the hassle, you can stick with the password unlock; which also can be much more secure than a pin lock(assuming you don't use a dictionary word as your password).

[AverageGlabella]

The finger print unlock is just an option that you can turn on via the settings. If you want to be more secure without minding the hassle, you can stick with the password unlock; which also can be much more secure than a pin lock(assuming you don't use a dictionary word as your password).

I would agree with that I was just making the example of a pin lock because thats viewed as insecure by a lot of people and I wanted to compare another insecure option with another semi insecure option. A password with a mixture of characters and special character while being 10+ characters would be the better option of the two.

[bitmover]

Disadvantages:

• Currently Android only. If you're on iOS, probably lookup FreeOTP(also open source)

Why not use Authy? If having your 2FA backups stored on a company's servers is fine with you, then by all means go with Authy. But if you prefer storing your 2FA backups yourself, through an encrypted flashdrive and such, then try out Aegis.

Interesting. Nice find really
The problem is that it is Android only. If it were desktop/Android at least it would be be nice (I like to have one device as backup

[TryNinja]

Disadvantages:

• Currently Android only. If you're on iOS, probably lookup FreeOTP(also open source)

FreeOTP doesn't have a backup option, so I can't see any advantage of using it over Google Authenticator.

In that case, I would go with Authenticator.

[dkbit98]

Good thing I like is that Aegis also supports F-Droid and it is OpenSoruce.
No need to have GooglePlay installed.
Some people are privacy fanatics

[o_e_l_e_o]

If you do a backup though, the exported .json file is not encrypted.

I downloaded the app on my old phone to have a play around with, and when I tried to export my database I was met with a pop-up containing a check box for "Keep the database encrypted". I assume you have to have first encrypted the database with a password before being offered this, so perhaps if you haven't added a password then your back ups will be in plain text.

I have to say it is a really nice app. Next time I'm changing phones I might make the switch.

The problem is that it is Android only. If it were desktop/Android at least it would be be nice (I like to have one device as backup)

You could always use an old phone stashed away somewhere, or even download an Android emulator on to your computer and install it on that.

[bitmover]

The problem is that it is Android only. If it were desktop/Android at least it would be be nice (I like to have one device as backup)

You could always use an old phone stashed away somewhere, or even download an Android emulator on to your computer and install it on that.

Thanks, but I prefer to use authy, which just let me install anywhere without any turn arounds.

We really need more competition in this 2ffa software market

[TryNinja]

Thanks, but I prefer to use authy, which just let me install anywhere without any turn arounds.

We really need more competition in this 2ffa software market

The same could be said about Bitcoin wallets. "I prefer Blockchain.com because I can access my funds anywhere without any turn around". Yes, it's convenient, but your data is stored in a third-party server somewhere. That's why apps with a backup option exist. You export all your 2FA accounts or maybe even just write down your 2FA codes and you are done. You only trust yourself, can't lose access to your accounts and your backup can be a few flash drives.

[bitmover]

Thanks, but I prefer to use authy, which just let me install anywhere without any turn arounds.

We really need more competition in this 2ffa software market

The same could be said about Bitcoin wallets. "I prefer Blockchain.com because I can access my funds anywhere without any turn around". Yes, it's convenient, but your data is stored in a third-party server somewhere. That's why apps with a backup option exist. You export all your 2FA accounts or maybe even just write down your 2FA codes and you are done. You only trust yourself, can't lose access to your accounts and your backup can be a few flash drives.

I don't agree authy is like blockchain.com

If a hacker get access to my authy account he can't login in any account that I have.
He won't even know the logins (neither the passwords) to the websites which the 2fa is enabled.

On the other hand, if a hacker get access to a blockchain.com account, that's enough to get the funds.


In case of authy, The data stored in a third party server is just useless, while the bitcoin blockchain.com is not.

Maximum security is nice for things that need maximum security, such as money. But access to those accounts in exchanges, which shouldn't have any money in the first place, doesn't need maximum security. Actually, " oversecurity " is a problem imo.

[desticy]

A very interesting alternative. It is a pity that there is no version for iOS.
I especially like the possibility of backup, because Google authenticator does not have such functionality, which is why everything has to be written down on paper and stored in the backyard buried in a small safe.

[The3max]

I have been using Authenci for a long time, since I entered this market! However, it has many inconveniences that make me uncomfortable. This article is really helpful to me. How can I transfer my data to this aegis platform?

[Casdinyard]

I have been using Authenci for a long time, since I entered this market! However, it has many inconveniences that make me uncomfortable. This article is really helpful to me. How can I transfer my data to this aegis platform?

Read this.

If you do a backup though, the exported .json file is not encrypted.

I downloaded the app on my old phone to have a play around with, and when I tried to export my database I was met with a pop-up containing a check box for "Keep the database encrypted". I assume you have to have first encrypted the database with a password before being offered this, so perhaps if you haven't added a password then your back ups will be in plain text.

While I think that's a downside of it.

[reingard]

While I think that's a downside of it.

What is the downside? You have the option to export the database in a encrypted format or in plain text. Free choice is always better than a single choice for everyone, and the fact that they have support for encrypted backups is super B.