this post was submitted on 20 Jul 2023
23 points (96.0% liked)

Selfhosted

60887 readers
992 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
ayyy@sh.itjust.works
curbstickle@anarchist.nexus
curbstickle_lw@lemmy.world
23
Need recommendations on something like Vaultwarden but for 2FA only. (lemmy.dbzer0.com)
submitted 3 years ago by fedonr@lemmy.dbzer0.com to c/selfhosted@lemmy.world
22 comments fedilink hide all child comments
 

So I selfhost Vaultwarden which allows TOTP but I like to keep my 2FA and Password Manager separate, so I'm looking for something like Vaultwarden which can sync up with my server, but for 2FA only. I came across 2FAuth which can do it, but it only has webapp, so if a Alternative Service where there is a client for iOS and Android it would be a lifesaver. Thanks in advance for any suggestions or recommendations.

you are viewing a single comment's thread
view the rest of the comments
[–] morethanevil@lmy.mymte.de 6 points 3 years ago (2 children)

In my opinion the best 2FA is a yubikey. They have an TOPT app too, but I prefer webauthn.

[–] vividspecter@lemm.ee 2 points 3 years ago (1 children)

I wish that cloudflare deal was still available. They are pretty expensive at RRP, although probably worth it on balance.

[–] morethanevil@lmy.mymte.de 2 points 3 years ago (1 children)

If yubikeys are too expensive for you, you can use the security keys. Webauthn is supported, but not TOTP. You could use vaultwarden or bitwarden for TOTP and the Security key as 2FA for bitwarden 🤔

[–] vividspecter@lemm.ee 2 points 3 years ago

I'm actually using KeepassXC etc at the moment and am waiting on them to support hmac-secret so the cheaper security keys work. Although I'm willing to switch to vaultwarden, I'd be more comfortable with both supporting it before I invest in it.

[–] pahakala@lemmy.world 2 points 3 years ago (1 children)

do you have two or more yubikeys? how do you handle sites that only allow registering a single webauthn dongle? how do you handle backup 2fa?

loosing my yubikey is the main reason why i havent used it yet for webauthn. I just use pass and openpgp keys stored on the yubikey as that way it was possible to backup the encryption private key to a seperate usb drive that can be used to restore it later if needed.

[–] morethanevil@lmy.mymte.de 3 points 3 years ago

I have 2 yubikeys, one for backup in a safe place. If a site only allows one key, like PayPal, I use another method. Yubikeys are for 2FA on my nextcloud and bitwarden mainly. Both have backupkeys in case you lose them. Those keys are printed out and stored in a safe place too.