aren't most authenticator apps just wrappers around existing totp libs? prob don't have to do much of the crypto stuff yourself

ente.io/auth/ is where it's at

Nice. Give it a go. I've been wanting to build an E2EE app too but I'm still studying and putting it off for another week. Hmm.

Ente, try it

I recently switched (quite painfully because manual) from authy to the open source 2fas - highly recommended if you decide not to make your own one ;)

if you wanted to get into swift i saw a guy on reddit use this recently https://github.com/lachlanbell/SwiftOTP

One of my top criteria for a project is, if I screw up can I tell everyone, “hey, at least no really important personal data was lost”. I didn’t mess up your bank account. etc.

design over function

My password manager (1Password) stores my 2fas

For others reading the thread, iCloud Keychain has this built-in now, it’s very convenient.

Authy is the only authenticator that won’t let you back up or export your codes. If you’re unfortunate enough to primarily use Authy, moving away is an unnecessarily arduous process.

The future is passkeys.

Do it, I learned a lot writing my own yubikey! Security software is fun

Iirc authenticator apps don’t generate any keys, so I don’t think you need to care much about security

You should check out Ente Auth, it's like Authy but better

write one that gives every site and user the same password

How would you improve Google Authenticator?