search

andro2157 / DiscordTokenProtector

Protect your Discord token from malicious grabbers!
GNU General Public License v3.0
272 stars 27 forks source link

Suggestion for further 2FA methods #68

Open Nullifii opened 1 year ago

Nullifii commented 1 year ago

Hello, Love the app! One thing that I would love to see as a more secure (convenience as well) is the addition to authenticator apps such as Google Authenticator or Authy. Dunno if this is hard to implement but its just one more feature that could be added.

Thanks! Nullifii.

andro2157 commented 1 year ago

Hello, Thank you for using DTP! For an OTP to make an authentification secure, the secret key of the OTP must be kept secret. In this case, the only way to do this would be to encrypt it the same way the token is currently encrypted. Therefore, if an attacker has your password, your token and the OTP secret key are compromised. Here, the OTP wouldn't make the token more secure. Please let me know if you thought of another way of implementing this!