[{"data":1,"prerenderedAt":173},["ShallowReactive",2],{"project-41917948":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":29,"sentiment":30,"stance_mix":31,"scored_comments":35,"aspects":36,"strip":40,"post_text":41,"what":42,"said":65,"maker_in_thread":114,"shape":119,"grid":123,"attempts":136,"same_week":137,"maker_shows":34,"maker_hidden":166,"reader_version":167,"card":168},"41917948","OVault","Simple and Local OTP Management for iOS\u002FmacOS","title","Show HN: OVault – Simple and Local OTP Management for iOS\u002FmacOS","https:\u002F\u002Fovault.net","ovault.net","deltaknight",1729626219,2024,24,6,1754,3515,50,"shown","security_privacy","two-factor authentication app","mobile_app",[24,25,26,27,28],"otp","totp","two factor authentication","authenticator","keychain","quiet",null,{"positive":32,"neutral":33,"mixed":32,"critical":34},0,1,2,3,{"idea":37,"privacy":38,"design":39},{"positive":32,"critical":32},{"positive":32,"critical":33},{"positive":32,"critical":33},[35,32,33,32,33,32],"OVault is a super simple iOS and macOS app that lets you store and view your OTP codes for two factor authentication.\n\nI found that my personal favourite OTP app Authy seemed to be getting worse with each iOS release. Its usability has never been great, and iOS 18 meant that it lost its Home Screen Widget that let me view my OTP codes without opening the app. I decided to switch to another app, then became frustrated that I couldn't easily export my secrets from Authy. Of course I'm sure there are good security related reasons for this, but I didn't want to migrate all my OTPs just to end up i",{"problem":43,"audience":49,"pricing":30,"motivation":54,"time_to_build":30,"stack":61,"openness":62,"stage":63,"team_size":64},{"value":44,"source":45,"evidence":46},"Storing and viewing 2FA OTP codes without trusting an external service, with widgets and exportable secrets","maker",[47],{"id":48},"post",{"value":50,"source":51,"evidence":52},"Users wanting a simple authenticator on iOS and macOS","inferred",[53],{"id":48},{"value":55,"source":45,"evidence":56},"Frustration with Authy after iOS 18 removed its widget, and wanting local storage and export",[57,58],{"id":48},{"id":59,"by":11,"text":60},"41923817","Yep more or less, I liked the idea of having the “Passwords” contain my OTPs (didn’t mind about the threat model for having OTPs and Passwords in the same place), but I didn’t…",[],"unknown","launched","solo",{"praise":66,"objections":75,"requests":83,"questions":94,"alternatives":99},[67],{"value":68,"source":69,"evidence":70},"Maker prefers Keychain-based storage and widgets over Authy's approach","commenter",[71],{"id":72,"by":73,"text":74},"41923789","Terretta","As OTP codes are built into the new \"Passwords\" app (and which iOS already supported though tucked away in settings), is the main reason for this the widgets?",[76],{"value":77,"source":69,"evidence":78},"Syncing OTP secrets via iCloud Keychain weakens the something-you-have factor",[79],{"id":80,"by":81,"text":82},"41922841","lukaslukas","Isn't the point of OTP is to keep it on one device only (ideally not the primary one?) If someone gets access to iCloud then they will automatically be able to read all OTP…",[84],{"value":85,"source":69,"evidence":86},"Copy OTP codes via shortcuts, which the maker plans to add",[87,91],{"id":88,"by":89,"text":90},"41920487","HatchedLake721","I hate Authy since the day CTRL+C stopped working. That was 10 years ago or so? Why can’t I copy the code via a shortcut? Why do you force me to move my mouse and press the copy…",{"id":92,"by":11,"text":93},"41922435","Completely agreed, it’s very frustrating when a once useful app becomes sidelined and is difficult to migrate off of. Speaking of shortcuts, that’s actually been on my list of…",[95],{"value":96,"source":69,"evidence":97},"Whether widgets are the main reason for switching from Apple's Passwords app",[98],{"id":72,"by":73,"text":74},[100,104,108],{"value":101,"source":69,"evidence":102},"Apple Passwords app with built-in OTP support",[103],{"id":72,"by":73,"text":74},{"value":105,"source":69,"evidence":106},"Authy",[107],{"id":88,"by":89,"text":90},{"value":109,"source":45,"evidence":110},"Yubikey hardware tokens",[111],{"id":112,"by":11,"text":113},"41923148","Yes you’re right, ideally OTPs should be on a single device you control (to fulfil the “something you have” factor of authentication). However, for me personally the syncing of…",{"comments":35,"answered":35,"key":115},[116,117,118],{"id":59,"text":60},{"id":112,"text":113},{"id":92,"text":93},{"commenters":120,"max_depth":34,"maker_replies":35,"first_comment_mins":121,"lifespan_hours":122},4,316,16,[124,126,128,130,132,134],[72,32,35,125,73,32],"project\u002Fneutral\u002Fidea",[59,32,32,127,11,33],"project\u002Fpositive\u002Fdesign",[80,33,33,129,81,32],"project\u002Fcritical\u002Fprivacy",[112,33,32,131,11,33],"project\u002Fneutral\u002Fprivacy",[88,34,33,133,89,32],"project\u002Fcritical\u002Fdesign",[92,34,32,135,11,33],"maker\u002Fpositive\u002Fnone",[],[138,143,148,152,157,161],{"id":139,"name":140,"points":141,"category":142},"41893524","HN Update",644,"ai",{"id":144,"name":145,"points":146,"category":147},"41914544","Rust Web Framework",488,"languages",{"id":149,"name":150,"points":151,"category":142},"41929804","Pablonet",472,{"id":153,"name":154,"points":155,"category":156},"41915958","Counter-Strike Football",420,"games",{"id":158,"name":159,"points":160,"category":142},"41926770","Agent.exe",406,{"id":162,"name":163,"points":164,"category":165},"41903864","Epublifier",290,"productivity",false,"v2",{"id":169,"name":5,"line":6,"ai":166,"cat":20,"year":13,"points":14,"comments":15,"rec":29,"s":30,"top":18,"kw":170,"maker":11,"domain":10,"tier":19,"attempts":32,"strip":171,"url":9,"mix":172,"praise":68,"objection":77,"sub":21},41917948,[24,25,26,27,28],"301010",[32,33,32,34],1794036663290]