Authenticator VS duckduckgo-privacy-extension

Have you considered https://authenticator.cc/ ?

I realize it is amusing to even consider offloading OTP generation to a web browser extension however, if `$work` doesn’t want to provide you with the correct hardware (e.g. Yubikey, NitroKey, etc.) there are boundary-respecting alternatives

No. It only proves that TOTP, as implemented by mobile apps, is useless against phishing.

The extension from https://authenticator.cc, with smart domain match enabled, would have caught this by showing all other TOTP codes besides the one intended by NPM.

On a Mac, Keychain would also have caught this by not autofilling: https://support.apple.com/en-ph/guide/passwords/mchl873a6e72...

Check this out: https://github.com/Authenticator-Extension/Authenticator

I use a browser extension from https://authenticator.cc/

While I do not know whether its UX is similar, it does have a sync feature (but not cross-browser), an export feature, can backup its data to Google Drive, can store everything encrypted (but not by default), is recommended by at least one government website (SSS Employer Portal in the Philippines), and is there for a long time. Oh, and it also remembers which site each secret comes from, and hides others.

> If you are unable to use the Authy mobile apps, we recommend you look in to alternative desktop products such as the following suggestions:

> https://authenticator.cc/

Currently, I'm using the Authenticator.cc browser extension on the same device for TOTP. However, I imagine security will eventually tighten and running authentication app/protocols on the same device that is logging in wont be an option.

The recommended extension is Authenticator, and it is compatible with Chrome, Firefox and Edge.

I've got a situation where we have a couple of staff that can't install MS authenticator; no smartphone. In some ways I'm jealous of them. Anyway, wife's company is of significant size and she passed off their docs on the issue and they use authenticator.cc browser extension for these situations. I tested it myself, and it works. It's just the raw OTP and not a number entry challenge.

I'm assuming they're talking about https://duckduckgo.com/app, which DDG does call the DDG Browser themselves, since that was involved in a 'scandal' re. trackers

I’d also recommend considering choosing a good internet browser, as you stated “ i just dont feel comfortable if companies and people can see everything ive ever searched up”. A browser that either blocks ads and trackers or at least doesn’t contain its own trackers, is a great start. I would recommend using either Firefox, Brave, or DuckDuckGo. You also should use some sort of additional tracker blocker, such as uBlock Origin.

https://duckduckgo.com/app - Email Protection kalder de det.

DuckDuckGo Privacy Browser (version 5.158.2): Privacy, simplified

Since DuckDuckGo has grown from a privacy-focused search engine to the all-in-one privacy solution that we offer today, we needed to expand our Privacy Policy to cover our new browsers and features like Email Protection, App Tracking Protection, and more. Check it out here. Privacy and transparency are foundational to our business and community so even though this expanded Privacy Policy doesn’t reduce any privacy protection, we wanted to make sure our Reddit community knows about it.

Es gibt auch den DuckDuckGo Browser https://duckduckgo.com/app

Have a look at duckduckgo.com, it has a browser for iPhone and Android that is supposed to block all these trackers by design. I've not heard anything bad about it from anyone else yet and information can be found here: https://duckduckgo.com/app