Sample Header Ad - 728x90

FreeOTP or FreeOTP+ - Which is More Secure?

8 votes
1 answer
5260 views
I have been using FreeOTP by Redhat/Fedora for a few years now as my main two way authentication app. However, I have realised that the current version (1.5) is quite a few years old (having been released in 2016). https://freeotp.github.io/ https://f-droid.org/packages/org.fedorahosted.freeotp/ There is however a forked version; FreeOTP+. This fork's latest update (1.7) came out in December of 2019, making it far more up to date than the upstream app. https://f-droid.org/en/packages/org.liberty.android.freeotpplus/ I am however concerned about security, due to the app playing a very important role in account security. I am also unsure as I am not too familiar with the work/trustworthiness of the developer of the fork (I mean him/her no offence when I say this, I'm just cautious when it comes to account security), where as I know Redhat to be a secure and freedom respecting company. So which would be the safer option? Should I stick with the older FreeOTP? Do two way authentication apps need to have up to date security patches? Or can I trust the more up to date FreeOTP+? Also, even though I appreciate the help and good intentions of people who would recommend this; but please don't recommend that I use the Google or Microsoft authenticators instead. I want to use a Free/Open Source authentication app rather than a proprietary one.
Asked by AdLinux (245 rep)
Feb 23, 2020, 01:54 PM
Last activity: Apr 25, 2024, 02:29 PM