Authier password manager

@LastPass letting you down? #lastpassdown Try me for a few days

@capajj @shinework @okta @toddmckinnon It's not just Okta, @bitfinex also disables autocomplete for no reason

@shinework @okta @toddmckinnon This is the input I am talking about

Reminder: Always add the autocomplete="one-time-code" attribute to your SMS validation pin forms. It enables devices to automatically fill in the input with the code from incoming SMS, streamlining the UX. Don't overlook this small but impactful detail!

@capajj @thdxr that's why it is best to enter MFA into the input at the last second which makes it almost impossible for the attacker to actually do anything as even a few API calls will usually take longer than that 😎

@thdxr Imagine one of websites you use gets hacked and keylogger is installed in their JS bundle. With MFA you are better off, because even if they intercept your password in plain text and MFA token, they only have up to 30 second window after which the MFA token is useless.

i still can't figure out if storing mfa in my password manager defeats the point or not

Do you remember when you joined X? I do! #MyXAnniversary

Also, If you ever used last pass, assume all your passwords are compromised They are scum My account was set to 1,000,000 iterations and my password was very complex with 2FA. They lie about their breaches

@its_beckster How about writing the password down? We know about this one cool app in case you need any pointers😅

You can, although encrypting them with AES-256 and storing the encrypted string in the cloud is probably a better idea.

If you have a long password, you're an IT security pro.

Does the company you currently work for provide all employees with a password manager? If you answered “yes”, which one? If you answered “no”, what support do they give staff to create strong, unique passwords on the services they use?

@kumailht It's the default, so I guess the question should be-how important is light mode?

How important is dark mode?

@philkellr Anyone is welcome to try here: github.com/authier-pm/aut… If they copy the app/extension well enough so that it's actually usable we might just give it a rest and move on to something more productive than figuring out password management.

Side builders who build in public: Aren’t you afraid, that once your startup shows traction, fulltime builders can easily copy and surpass you?

@t3dotgg This could not happen with Authier-there is not desktop app yet 😅, but it will come later this year 😎

You, uh, you good there 1pass?

@mancerrss @steventey What is so broken about it?

@steventey Yea the current Family sharing of 1Password is so broken right now. But idk if I will switch. I like the custom fields and cross-platform control I have on 1Password

RIP 1Password #WWDC23

Authier password manager is now available on apple App Store: apps.apple.com/cz/app/authier…

@marclou Don't worry, our code will not be when we launch in a month or two.

If your code is tested when you launch, you launched too late

eBay has such a limited selection for their 2-factor authentication. I don't want to have to install an app other than common apps like Google Authenticator or Authy. I also don't want to open myself up as a SIM-swapping target. So, @ebaytech, any plans to add more 2FA options?

@wesbos @heyAustinGil We can do that for free if @Google reviews and let's us publish our extension to the store. Also shout out to @roboform-their autofill is pretty darn good as well.

@heyAustinGil Honestly I'd do it less, like even 100 mil

620 milly is a lot, but is it enough to make forms autofill consistently all the time?