Hi, Using the Google Authenticator app works with most of the 2FA services that use the standard 2FA protocols. A barcode is generated and that is scanned into the app. I have good results with Authie as it saves the 2FA keys to an account meaning if the phone gets lost it can be recovered. I have 2FA on most things these days. Andrew. -----Original Message----- From: Blind-sysadmins [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of David Mehler Sent: 01 November 2017 15:28 To: blind-sysadmins <blind-sysadmins@lists.hodgsonfamily.org> Subject: [Blind-sysadmins] 2fa accessibility thereof Hello, To those of you who are using 2fa solutions how accessible and easy to use do you find them? I'm looking at implementing 2fa but am not sure which way to go and would appreciate some recommendations. I've read that sms texting where you get an OTP six-digit code is insecure, is this correct because this option would be easiest? Same lines a TOTP solution can I limit as to how long the token is good for? With regards google authenticator can it secure other services other than google? I'm thinking dropbox or does dropbox have native 2fa support? Lastly has anyone used sites that will allow a biometric such as a fingerprint to be utilized as the second factor or the authy service? My goal is to increase service security for both my home/home users and contract users, while keeping things as easy as possible as some of these people are not really technology-savvy. The issue that got me asking this question was how to best protect a keypass database stored on either a google drive or dropbox server, against compromise of the underlying service while still making it available for multiple device connections. Thanks. Dave. _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org https://lists.hodgsonfamily.org/listinfo/blind-sysadmins