M@rty's avatar
Level 1

what is the good alternative of 2fa Google Authenticator in laravel

looking for an alternative to 2fa Google Authenticator in laravel

0 likes
27 replies
Sinnbeck's avatar

Pretty sure you can just use another app? I prefer Authy

M@rty's avatar
Level 1

@Sinnbeck If possible could you please share the details

how to setup or packages use for simple login/registration form using Authy in laravel 7

Thanks

M@rty's avatar
Level 1

@Sinnbeck will it work the same?

like Google 2FA, are users able to scan the QR code and get the code on the handset?

Sinnbeck's avatar

@M@rty I believe yes. Its just a key, so any auth app should work to my knowledge.

M@rty's avatar
Level 1

@Sinnbeck ok, thanks

what about the Authy? I don't get a particular idea of how to use authy in laravel

is there any package or documentation for implementing in Laravel 7?

I found this: https://github.com/rinvex/laravel-authy

if yes this will be helpful, otherwise I'll be confused for sure

M@rty's avatar
Level 1

@Sinnbeck I got your point, what will be the role of Authy here?

does a user get the auth key on the Authy app?

Sinnbeck's avatar

@M@rty I assume you have never used 2fa before? When you try to get into a page the first time, you get to add it to your phone (the link between the page and the app on your phone). Here you can pick google auth, Authy, Microsoft auth etc. Once this link is made, you will be able to use this app in the future to authenticate your login (it will show a code in the app that you type into the website, or it just gives you an "allow login" button)

Sinnbeck's avatar

@M@rty Maybe check if one of your services allow you to switch on 2fa so you can test it out? I have several services that I have it enabled on :)

Sinnbeck's avatar

@M@rty As I mentioned, that package is abandoned. So chances are it will never ever get any updates (most likely not). So I really recommend upgrading to a newer php/laravel version so you can use the first package I suggested. It goes a bit against the idea of adding security measures, if you do so in an unsecure way.

M@rty's avatar
Level 1

@Sinnbeck since my upper hands don't want to upgrade and want a solution with the current version only, I will go with the google 2FA :)

Sinnbeck's avatar

@M@rty If there is a package for google 2fa, im sure it will still work with other authenticators. Link?

Sinnbeck's avatar

@M@rty Yup. If you use that package, you can use Authy for instance :)

Sinnbeck's avatar

@M@rty I assume you have this original question answered, so I would close this one and create a new :)

1 like

Please or to participate in this conversation.