Avatar

styx

styx@beehaw.org
Joined
0 posts • 9 comments
Direct message

I have a two layer system in place:

  1. I use Aegis, I have automatic encrypted backups, and syncthing to synchronize the backups to my private server. If I need to reconfigure Aegis, I just import the backup.

  2. I have 2FA backup codes as encrypted text files, which are also synced to my server with syncthing. I have the encryption/decryption software installed on my phone and windows, so I can use a backup code if I don’t have access to Aegis.

One issue was I had to write my own apps for windows and android for encrypting/decrypting the text files 😃. You can check them on GitHub: https://github.com/mcanyucel/TextCrypt-Windows https://github.com/mcanyucel/textcrypt-android

They use SHA256 with random IV and random salt. No warranties, though 😅

permalink
report
parent
reply

If this is a one time work, I would recommend using WordPress with a free template. You have to learn WordPress, but it will be easier than learning HTML CSS js trio.

permalink
report
reply

I am not a big fan of storing the passwords and 2fa together since if it is compromised, you lose both layers at the same time. But the alternative is not so convenient. But then in security, it is always a balance between the two.

permalink
report
parent
reply

While they may not be able to force small developers, they can force the users by deeming all browsers that do not implement this feature illegal. This possibly will not work on the tech savvy, but standard users (the majority) will be affected.

permalink
report
parent
reply

Well, we have all been to a waterpark, no? The second case poses more difficult issues, though.

permalink
report
parent
reply
8 points

Why jot milpsi?

permalink
report
reply

I do. I have a personal libreddit instance on a vps tho, so no login, no update, no comments, no ads. Basically no touch, only watch 😆

permalink
report
reply