defcon defconxt

Exporting your 2FA tokens from Authy to transfer them into another 2FA application

IMPORTANT - Update regarding deprecation of Authy desktop apps

Past August 2024, Authy stopped supported the desktop version of their apps:
See Authy is shutting down its desktop app | The 2FA app Authy will only be available on Android and iOS starting in August for details.

And indeed, after a while, Authy changed something in their backend which now prevents the old desktop app from logging in. If you are already logged in, then you are in luck, and you can follow the instructions below to export your tokens.

If you are not logged in anymore, but can find a backup of the necessary files, then restore those files, and re-install Authy 2.2.3 following the instructions below, and it should work as expected.

Moving Authy to 1Password

1Password 5.3 for OSX, 5.2 for iOS, and 4.1.0.538 for Windows support OTP. I've been using Authy for a while now, but the fact is, I haven't really been using 2FA for some time. As mentioned by 1Password in a recent blog post, having the OTP generator and password on the same device is very much not 2FA. It's just an expiring OTP, which can help, but let's not kid ourselves too much.

With that out of the way. One of the things that was interesting to me was moving my OTP out of Authy and into 1Password. I like the control I get with 1Password, but I didn't want to have to reset all my OTP right away, that would suck. So, I got to dissecting the Authy Chrome App to see what I could do.

Run the Authy Chrome app and make sure it's unlocked.

Now, enable Developer mode in Chrome. We'll need this to inspect the background application that stores al

IRC Reference

by xero updated 10.29.24

	version: "3.9"

	volumes:
	postgres:

	services:
	postgres:
	image: postgres
	restart: unless-stopped
	healthcheck:

	# Enable "charge + tether" in Settings -> Setup -> Mobile Router Setup -> Tethering
	# Use a usb cable to connect (tethering) to the router on port 5510

	# Useful links:
	# Verify the IMEI number
	# https://en.wikipedia.org/wiki/Luhn_algorithm
	# Challenge/Response Generator for Sierra Wireless Cards V1.0
	# https://github.com/bkerler/SierraWirelessGen

	ATI


	#NoEnv
	#Warn
	#InstallKeybdHook
	#InstallMouseHook
	#Persistent
	#useHook, On
	#SingleInstance force
	SetBatchLines, -1
	SendMode Input

	<?xml version="1.0" encoding="UTF-8"?>
	<opml version="2.0">
	<head>
	<title>MyFeed</title>
	</head>
	<body>
	<outline title="Blogs" text="Blogs">
	<outline title="The Cloudflare Blog" type="rss" xmlUrl="https://blog.cloudflare.com/rss/" text="The Cloudflare Blog" htmlUrl="https://blog.cloudflare.com/" />
	<outline xmlUrl="https://www.rossmanngroup.com/feed/" title="Rossmann Repair Group" text="Rossmann Repair Group" type="rss" htmlUrl="https://rossmanngroup.com" />
	<outline text="Google Online Security Blog" type="rss" htmlUrl="http://security.googleblog.com/" xmlUrl="https://security.googleblog.com/feeds/posts/default?alt=rss" title="Google Online Security Blog" />

	import requests
	import subprocess
	import json
	import sys
	import threading
	import time
	from Queue import Queue
	import urllib3
	import urllib3.contrib.pyopenssl