You need to install the Chrome extension version of Authy. A few minutes later you’ll receive another SMS with an actual code, which you can also ignore.Īt this point you could enter the SMS code to complete setup and continue using SMS codes without ever touching Authy itself, but we can do better… Step 2: Sign in to Authy Note that this is actually Twitch selling you out to Authy, who now get your phone number and Twitch email address.Īnyway, Authy will now send you an SMS trying to trick you into installing their app, ignore it for now. It’ll take you to a page where you need to enter your phone number. On the desktop website, go to Settings > Security and Privacy > Security > Two-Factor Authentication.Ĭlick the “Set up two-factor authentication” button. desktop Google Chrome (or Chromium etc.).Unfortunately there’s no recovery codes or anything so it seems like recovery will still be based on SMS, but at least you can have the freedom to use whatever TOTP client you want.

They only offer some Authy-specific integration which forces you to either use insecure SMS (ugh) or the Authy app (even more ugh).īut fear not, once again under the hood it is mostly standard TOTP, we just have to do the extra work of reverse engineering and removing the proprietary bloat. You would think that being owned by Amazon (who does 2FA properly), they’d have it under control, but apparently not. Original ArticleĪfter the horror of PayPal 2FA has finally been resolved, I’ve just discovered one even worse: Twitch.

Unfortunately you still have to use Authy SMS first before it lets you enable it, so there are no recovery codes and SMS remains your insecure backup.Īlso another 2FA fail while I’m at it: there is no option to view the TOTP secret directly, just a QR code, so useless on desktop.

Twitch have finally just released support for standard TOTP apps. Set up 2FA (Two Factor Authentication) for Twitch with Google Authenticator (or other TOTP client) Update 2020–11–24

Google authenticator 1password