Question Is Microsoft Authenticator a good alternative to Authy?

[jetman]

Like some other posters, I am disappointed that the Authy desktop app is being discontinued.

I was hoping to install the Android version on Windows 11 desktop but it seems that isn't possible because Authy isn't available in Amazon App Store. I understand that Microsoft Authenticator is available on the Amazon App Store and therefore (in theory) could run on a Windows 11 desktop computer.

When Authy was first released, it had the advantage of being one of the only authenticator apps to a) provide cloud backups and b) allow synchronisation between multiple devices. Microsoft and Google Authenticators didn't have this feature at the time and there were reports of people losing their devices and being permanently locked out of their accounts.

However, does Microsoft Authenticator now include cloud backup and synchronisation features? Is it now just as good as Authy?

I'd be grateful to hear feedback from people who have experience of using both.

 

[TuxTalk]

For me personally, no ! I switched from MS to Google Authenticator because the Google one syncs perfect, the MS one made me loose all my entries when switching phone.

 

[Jonny Quest]

But even though Authy no longer has a desktop app, the Android version still syncs, correct? It shows my Accounts as being backed up from the Setting tab. I take it if I lost the app somehow, or switched phones, I would just need to use the same phone number and password and it would restore my accounts from its servers. For me, it's the loss of the convenience of the desktop app that is a bit annoying. Otherwise, I'll still use Authy and have it be separate from an all-in-one type of password manager/authenticator for security's sake, at least IMO.

 

[simmerskool]

fwiw: I use Authy on my iphone & keepass on my win10 desktop.

 

[ForgottenSeer 109135]

Be aware that you cannot export with MS Authenticator, so if you wanted to switch to a new app down the line you need to login in every accounts and deactivate/reactivate 2FA with the new app. I recently moved to Google authenticator and this took me like 2 hours. Also the sync/backup is unreliable.

 

[TairikuOkami]

Never ever rely on a single app, the database can be damaged, the account blocked, it is like relying in a single recovery method.
I use Microsoft Authenticator on android and 2fast on desktop, you can generate QR code from it to as many apps as you want.

 

[brambedkar59]

Never ever rely on a single app, the database can be damaged, the account blocked, it is like relying in a single recovery method.
I use Microsoft Authenticator on android and 2fast on desktop, you can generate QR code from it to as many apps as you want.

So you have to add accounts on 2fast first?

 

[TairikuOkami]

So you have to add accounts on 2fast first?

Yes, I actually did not know, how to sync MS Authenticator on multiple devices, the key is to enable it's cloud sync before adding anything.

 

[ekay312]

Never ever rely on a single app, the database can be damaged, the account blocked, it is like relying in a single recovery method.
I use Microsoft Authenticator on android and 2fast on desktop, you can generate QR code from it to as many apps as you want.

Do you think there is an ideal number of authenticators one can have in order to be "as safe as can be"?

 

[blackice]

Do you think there is an ideal number of authenticators one can have in order to be "as safe as can be"?

100! But seriously, two with one having a cloud backup is sufficient. You can have as many as you’d like, though.

 

[TairikuOkami]

Do you think there is an ideal number of authenticators one can have in order to be "as safe as can be"?

Just like any backup, it starts with 3, but that depends whether it is stored only locally or online. Some accounts also offer 2FA backup code which can be used to restore.
But lets not forget about the circle of hell, like having 3 cloud authenticators and requiring an authenticator to login to each, then losing access to a phone and thus to all 3.

 

[technozz2012]

I switch to 2FAS after authy discontinued desktop apps, it can sync multiple device with google drive and have browser extension for notify to smartphone when sign in without enter code manually

Google Authenticator is good altenative too, but its lack seacrh box for search account token in app, it has good sync too

 

[jetman]

Never ever rely on a single app, the database can be damaged, the account blocked, it is like relying in a single recovery method.
I use Microsoft Authenticator on android and 2fast on desktop, you can generate QR code from it to as many apps as you want.

Interesting point.

Is it possible to use multiple authenticator apps for the same account?
For instance, on my Google account could I use both Authy and MS Authenticator to generate the token for me? How would you set this up?

 

[Templarware]

It's better than the Google alterative if you use the Edge browser, because it has password manager functionality that syncs with your Microsoft account. You have everything in one app.

 

[TairikuOkami]

For instance, on my Google account could I use both Authy and MS Authenticator to generate the token for me? How would you set this up?

As will you generate QR code, you will scan it with both apps, the code should be the same. There are some tools on github, which allow Authy to export QR codes or even json which can imported to some apps like 2fas or Bitwarden, when using the old version 2.2.3, the question is whether you can trust them? I would probably rather do it manually.

GitHub - token2/authy-migration: Migrating from Authy to Token2 hardware tokens or alternative TOTP Apps, including WinAuth or Raivo OTP

Migrating from Authy to Token2 hardware tokens or alternative TOTP Apps, including WinAuth or Raivo OTP - token2/authy-migration

github.com

 

[jetman]

As will you generate QR code, you will scan it with both apps, the code should be the same. There are some tools on github, which allow Authy to export QR codes or even json which can imported to some apps like 2fas or Bitwarden, when using the old version 2.2.3, the question is whether you can trust them? I would probably rather do it manually.

GitHub - token2/authy-migration: Migrating from Authy to Token2 hardware tokens or alternative TOTP Apps, including WinAuth or Raivo OTP

Migrating from Authy to Token2 hardware tokens or alternative TOTP Apps, including WinAuth or Raivo OTP - token2/authy-migration

github.com

Sounds like a good idea to me.
You make a great point.