751
Recursive authentication (lemmy.world)
submitted 2 years ago by to c/memes@lemmy.ml
99 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 36 points 2 years ago (7 children)

PSA, don't use Microsoft authenticator. It's easy to accidentally wipe your cloud backup and lose all your authenticator codes when switching devices

  • permalink
  • fedilink
  • source
  • hideshow 14 child comments
    •
  • [–] 11 points 2 years ago (1 child)

    Cooperate forces me.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 2 years ago (1 child)

    I think you can use standard TOTP regardless if you add TOTP as an option in the authentication methods on your account page. At least I did and the system has yet to complain.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 2 years ago (1 child)

    Nope, IT can disable third-party TOTP services, and force all employees to use the official MS Authenticator app.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago

    Sounds like a antitrust violation imo. (Not based in knowledge of laws). In the future I hope to work in a co-op, non-profit, foss or privacy oriented bussiness or whatever. Just something I believe is beneficial to our future and not detrimental. Don't care if I lose potential wages or job security.

    Just the standard run of the mill tech company for a private owner idealizing infinite growth for investors and making software that tries taking advantage of the user or even required to use such? Not for me. (I don't need perfection just want improvent)

  • permalink
  • fedilink
  • source
  • parent
  • [–] 9 points 2 years ago* (1 child)

    Is there actually any way to export the secrets from MS authenticator? I've been wanting to move them to something like bitwarden but it's gonna take ages if I have to reset all ~50

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [+] 4 points 2 years ago* (last edited 1 year ago) (1 child)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 2 years ago (2 children)

    Yes, and while you can move it phone to phone on iOS, you cannot on Android. So stupid.

    If you are forced to use it by your company just use it for that email, nothing else. Use something like authy instead.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 3 points 2 years ago

    If your company forced you to use mobile authentication, they should also be providing you with a device on the company plan at no cost to the employee.

    In which case you should absolutely use MS Auth and give them all your delicious work data because nothing personal should be on the device anyway.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 2 years ago

    Authy requires a phone number last I checked & is a part of a for-profit entity. TOTP management is a simple task so there is no reason not to be using something open source.

  • permalink
  • fedilink
  • source
  • parent