The javascript didn't seem to send the extracted data anywhere, but I did disconnect from the internet while running the script.
What would possess anybody to use a 2FA service that locks you in?
Ignorance.
It's not like they advertise "No exporting" as a feature after all.
And generally speaking when people are grabbing an authenticator app it's because you're either trying to sign up for a service, or you've been given some kind of unwelcome push to upgrade your account security. Not an environment that's conducive to extensive research.
That's what makes Aegis better IMO. People use it because they like it, not because they're locked in.
So how do I go about switching away from Authy? Go to every site I have 2FA enabled and remove/readd with the new app?
Basically, yeah.
Blerggghgfghhh >:[
Thanks
You can follow the steps here to use a previous version of the desktop app to extract the keys: https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d958c93
The javascript didn't seem to send the extracted data anywhere, but I did disconnect from the internet while running the script.
What would possess anybody to use a 2FA service that locks you in?
Ignorance.
It's not like they advertise "No exporting" as a feature after all.
And generally speaking when people are grabbing an authenticator app it's because you're either trying to sign up for a service, or you've been given some kind of unwelcome push to upgrade your account security. Not an environment that's conducive to extensive research.