====== Two-Factor Authentication (2FA) ======

List of services supporting 2FA: [[https://twofactorauth.org/|Two Factor Auth.org]]

You can also use [[token|hardware tokens]] for this.

^ Amazon | amazon.com / Sign In / Your Account / Login & Security Settings / Advanced Security Settings / Two-Step Verification |
^ GitHub | github.com / Sign in / Settings / Security / Two-factor authentication |

===== Google =====
You could generate time-based numbers ([[https://en.wikipedia.org/wiki/Time-based_One-time_Password_algorithm|TOTP]]s) which could then be used as second factor ([[https://en.wikipedia.org/wiki/Multi-factor_authentication|2FA]]) to enter for logging into your Google account.

Seems that the [[https://myaccount.google.com/security/signinoptions/two-step-verification|2FA website for Google accounts]] doesn't support adding a TOTP generator like [[https://en.wikipedia.org/wiki/Google_Authenticator|Google Authenticator]] or a [[https://alternativeto.net/software/google-authenticator/?license=opensource|FOSS alternative]] for new accounts since April 2019, which makes you rely on proprietary Google services on your phone to secure your account.

This is a bad thing because you now have to use the Google-flavoured Android – or, more precisely, the [[https://developers.google.com/android/guides/overview#the_google_play_services_apk|Google Play Services]] – even if you installed the non-Google flavoured [[https://www.replicant.us/|Replicant]] or [[https://lineageos.org/|LineageOS]].

===== Software =====
  * [[https://getaegis.app/|Aegis]]
  * Authy
  * andOTP
  * Google Authenticator

==== proprietary ====
  * RSA SecurID
    * has [[https://github.com/cernekee/EasyToken/|EasyToken]] as FOSS alternative