Nominet 2FA authenticator recommendations please?

aZooZa · Apr 12, 2017

I'd be grateful for any recommendations for a 2FA client. I read horror stories about the Google version.

Requirements:

Access for 2 people independently from:

OS X
Android
iOS

We have 2 login email addresses at Nominet. Again, both logins need to be accessed independently by 2 persons.

TIA!

njf · Apr 14, 2017

Hi Dale,

Can't answer directly (other than say oathtool is good for me) - but here's my experience.

Looks like you set-up authenticator devices independently per login address (at a guess - I only have one account to test from).

I just set-up two devices - one as a primary - one as a back-up in case I lose the primary (Login Settings > 2FA > Add/manage devices for the second).

I'm using the Google app (how bad can they stuff it up?!) - and oathtool on Linux as back-up ("oathtool --totp -b xxxxxxxxx" where xxxxxxxxx is the secret key Nom give you and the crown jewels to protect).

I get oathtool hits for OS X, and OTP Auth looks good in the IOS App store as an Authenticator alternative - YMMV though!

HTHs - Nick.

njf · Apr 14, 2017

p.s. I saw talk of browser plugins to generate the OTP codes in my research too - but didn't fancy giving a secret key to a browser.

Adam H · Apr 14, 2017

I use SMS auth or Google Authenticator, as long as you keep the backup codes safe there isnt really anything that can go wrong. Just to note though, I make sure that when I add a site to Google authenticator, I make sure i scan the code in for my phone, my old phone which I have at my desk and my ipad. So if I lose my phone I still have 2 other devices I have the codes available with.