search

alexzorin / authy

Go library and program to access your Authy TOTP secrets.
MIT License
800 stars 57 forks source link

Not all Accounts being shown #1

Closed taylorcoffelt closed 5 years ago

taylorcoffelt commented 5 years ago

I have 9 total accounts in Authy, and only 6 are being exported by the tool. I'm not sure why, or what's different about the ones that aren't being exported.

alexzorin commented 5 years ago

Sorry for the late response, for some reason I didn't get notified about this issue.

Did you see any "Failed to decrypt token" messages when it ran?

Were the three missing accounts definitely TOTP accounts, rather than Authy-type accounts? Do you mind sharing which websites/services any of them were registered with?

taylorcoffelt commented 5 years ago

No "Failed to decrypt token" messages. The ones that came through were ones for

Ones that were missing were:

alexzorin commented 5 years ago

Thanks. GitLab is one that definitely works for me, so looks like it's not specific to providers (and all 36/36 exported for me :cry:).

Might be a bit tricky to investigate since I can't just ask you for your data. I'll have a think about it. Thanks for reporting.

taylorcoffelt commented 5 years ago

No problem. Mine is to a self-hosted version of GitLab. I'm not sure if that makes a difference or not. (I'd think not)

jmcbee commented 5 years ago

I'm experiencing this as well. The URI exported is just

tpauth://totp?digits=6&secret=XXX

They list of unknown services for me are:

jmcbee commented 5 years ago

I tried AUTHY_DEBUG:

{"account_type":"linode","digits":6,"encrypted_seed":"xxx","name":"Linode","original_name":null,"password_timestamp":1563434621,"salt":"xxx","unique_id":"123"}

I think it's happening when original_name is null

alexzorin commented 5 years ago

Thanks. I don't really know what the difference between name and original_name is. My Linode tokens have both values set and I've not encountered an empty one before.

I've pushed a change to fall back to other values if original_name is empty.

Not sure this is the same issue as reported by @taylorcoffelt though - your tokens were totally missing, right? If you ever get a chance, builds for authy 0.1.2 are available and if you run with the environment variable AUTHY_DEBUG=1, you could see whether the missing tokens are absent from the API response or whether I'm skipping over them for some dumb reason.

taylorcoffelt commented 5 years ago

Yeah, my tokens were missing completely from the output. I'll try running that in a bit and see if they end up in the API response.

taylorcoffelt commented 5 years ago

Weird, they're not in the API response

taylorcoffelt commented 5 years ago

Alright, I figured it out. The three other accounts weren't backing up, even though they were showing "Backed Up" in the authy app. I installed the Authy chrome extension, and only the first 6 accounts were showing up. I went into the app, toggled the backups, waited until all the accounts showed "Backed Up" again, and now all 9 are showing in the authy chrome extension and the authy exporter.

alexzorin commented 5 years ago

:+1: Awesome - I was about to comment with the same theory. Will leave a note in the README mentioning it.

taylorcoffelt commented 5 years ago

(As a side note, the changes you made to the app in v0.1.2 for the original_name fixed my exported tokens having names in the totp url)