this post was submitted on 21 Oct 2024
12 points (100.0% liked)
techsupport
2468 readers
13 users here now
The Lemmy community will help you with your tech problems and questions about anything here. Do not be shy, we will try to help you.
If something works or if you find a solution to your problem let us know it will be greatly apreciated.
Rules: instance rules + stay on topic
Partnered communities:
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Why should anyone take a camera to take a screenshot or click on 'save image'? Additionally, the secret key would be stored as well on the messenger app you are using to share the key among the group members.
Aegis, e.g. can open images containing a QR code and import the key that way. I assume other apps can do the same.
?
Beside that, I agree that its a security issue to have the plain text or QR code stored somwhere else than in the authenticator app itself. Inerently, trying to circumvent the introduced security by the uniqueness of the TOTP authenticator by sharing the key, one way or another, is a security issue by itself. That's why, I've recommended registering multiple independent authenticatior-keys, if possible, one per group member.