Re: TOTP apps, and WebAuthn recommended devices?

[David Brownlee <abs%absd.org@localhost>]

On Thu, 23 Mar 2023 at 13:51, Greg Troxel <gdt%lexort.com@localhost> wrote:
>
> 2FA is increasingly required, which is fine, but I wonder about
> strategies for coping as a NetBSD user.
>
> One thing is TOTP.  There are Android apps from f-droid (which suits me
> but not everyone), and there is vaultwarden which should allow bitwarden
> to do TOTP.  I wonder if there are good TOTP programs in pkgsrc and what
> people recommend.

I have to just chime in from the "moderate security level" as a happy
Bitwarden TOTP user. I switched everything from the dumpster fire
which is Google Authenticator to just plain Bitwarden a while back and
being able to paste into a TOTP form directly in Firefox on NetBSD
without having to switch to a phone was a real pleasure. (I'm forking
out a whole $10/year to use TOTP on Bitwarden servers - though I keep
planning to setup vaultwarden :)

> The other thing is WebAuthn which is apparently the new U2F.

Also very curious about this - I bought a YubiKey 5C back... before
Boris Johnson had the opportunity to break any self-isolation laws,
but never ended up setting it up.

David