FreeOTP or FreeOTP+ - Which is More Secure?
8
votes
1
answer
5260
views
I have been using FreeOTP by Redhat/Fedora for a few years now as my main two way authentication app. However, I have realised that the current version (1.5) is quite a few years old (having been released in 2016).
https://freeotp.github.io/
https://f-droid.org/packages/org.fedorahosted.freeotp/
There is however a forked version; FreeOTP+. This fork's latest update (1.7) came out in December of 2019, making it far more up to date than the upstream app.
https://f-droid.org/en/packages/org.liberty.android.freeotpplus/
I am however concerned about security, due to the app playing a very important role in account security. I am also unsure as I am not too familiar with the work/trustworthiness of the developer of the fork (I mean him/her no offence when I say this, I'm just cautious when it comes to account security), where as I know Redhat to be a secure and freedom respecting company.
So which would be the safer option? Should I stick with the older FreeOTP? Do two way authentication apps need to have up to date security patches?
Or can I trust the more up to date FreeOTP+?
Also, even though I appreciate the help and good intentions of people who would recommend this; but please don't recommend that I use the Google or Microsoft authenticators instead. I want to use a Free/Open Source authentication app rather than a proprietary one.
Asked by AdLinux
(245 rep)
Feb 23, 2020, 01:54 PM
Last activity: Apr 25, 2024, 02:29 PM
Last activity: Apr 25, 2024, 02:29 PM