Self-Hosted Main

502 readers

1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

Service: Dropbox - Alternative: Nextcloud
Service: Google Reader - Alternative: Tiny Tiny RSS
Service: Blogger - Alternative: WordPress

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

Awesome-Selfhosted List of Software
Awesome-Sysadmin List of Software

founded 1 year ago

MODERATORS

communick@selfhosted.forum

Authenticator apps on selfhosted VM (alien.top)

submitted 10 months ago by SysAdmin31@alien.top to c/main@selfhosted.forum

21 comments fedilink hide all child comments

Yesterday, I accidentally removed an authenticator app from my phone. Fortunately, I have another copy of the app on a different device. It made me realize how easy it is to lock myself out of my accounts. Do you think it's a good idea to create a Windows VM with an Android emulator on it and install copies of all my authenticator apps, this will not cause any security issues?

you are viewing a single comment's thread
view the rest of the comments

[–] zandadoum@alien.top 2 points 10 months ago (3 children)

why not consolidate your auth apps?

i use selfhosted vaultwarden (with backups ofc) for everything, except for vaultwarden, which is protected by authy . and authy can be backed up easily

[–] SysAdmin31@alien.top 1 points 10 months ago

I backup the data but not the apps

[–] ArrogantAnalyst@alien.top 1 points 10 months ago

Instead of authy, may I suggest Ente Auth. It works the same as authy but is open source.

[–] -quakeguy-@alien.top 1 points 10 months ago (1 children)

Sane MFA apps explicitly disallow their data from being backed up. That would be a massive attack vector if it was possible.

[–] guptaxpn@alien.top 1 points 10 months ago

Which is exceedingly dumb IMHO. Sure it would be a vector, but it's a vector to something that should be an additional step to username and password. Idk, I use vaultwarden and find myself worrying less about "what if?". I'm also enabling TOTP far more often now that I can easily add it to my phone and have it sync to other systems.