Authy MFA Desktop App

joseph.smith
joseph.smith Member Posts: 24 ✭✭✭

Hi everyone,

Hoping you guys might be able to shed some light on how you all configure MFA for things such as M365 tenant admin accounts that are accessible to multiple users?

We currently use Authy signed in as a single user with all our MFA accounts, all staff have access to the Authy desktop app and can view the MFA codes they need.

https://www.theverge.com/2024/1/8/24030477/authy-desktop-app-shutting-down

With the latest news that Authy is ditching the desktop app it's probably time we started to look at a different solution. We've always thought there must be a better way of doing this. It'd also be nice if the solution included a proper password manager.

Comments

  • frank.pietersma
    frank.pietersma Member Posts: 78 ✭✭✭

    You can use Keepas XC which has support for OTP entries, Works like a charm and its a very good password manager.

  • andriy.asselberg
    andriy.asselberg Member Posts: 29 ✭✭✭

    I second Frank on this. Keepass XC is wonderful and it's free. If you're looking for something cloud based however, I suggest Keeper Password Manager. I believe it's also available through Atera via the App Center

  • joseph.smith
    joseph.smith Member Posts: 24 ✭✭✭
  • mbudke
    mbudke Member Posts: 137 ✭✭✭

    I can recommend Keeper. It is easy to use, available as desktop app, via website and on the phone and the really good thing are "shared folder".
    Each person can get his own account with his own passwords but you can setup a shared folder which is then available to selected people. At any time you can remove a person and the data is not available anymore.

    In case a customer uses Keeper you can also share single entries with him or alternatively provide a one-time-access-link.

  • DP
    DP Member Posts: 56 ✭✭✭

    @joseph.smith - Bitwarden also has this feature. Another options is to use the M365 authenticator, using TOTP. You simply add the Microsoft Authenticator to multiple phones that need access. Just enable TOTP (which you already have active as you're using Authy).

  • tanderson
    tanderson Member Posts: 279 ✭✭✭✭

    @joseph.smith We used to use ITglue but switched to Hudu (mostly because screw Kaseya and everything about them) but there is a big price difference as well. Hudu is where we store all documentation on our clients including passwords. It allows you to have 2FA codes connected to the passwords that are shared. They have a cell phone app and web extension for auto-fills.

  • tanderson
    tanderson Member Posts: 279 ✭✭✭✭

    It works well, and you can dictate who has access to what info in Hudu, which then correlates to the passwords. So, techs have access to some things, and admins have access to others.

  • rstauffer
    rstauffer Member Posts: 15 ✭✭✭

    We use 1Password and it works great! It support 2FA and can have multiple vaults that can be shared with other employees also the browser extensions work very well

  • GregS
    GregS Member Posts: 6

    We use Bitwarden and Devolutions Password Hub depending on the client and the nature of the data