Migrating authenticator records into 1Password

Hey @mitchellzone:

Glad to hear you're thinking of getting your one-time passwords into 1Password! 😃

As 1Password only supports standard TOTP one-time passwords (what you'd use in Google Authenticator), not every service can be used in 1Password. For example, if your Microsoft account protected by Microsoft Authenticator is using push notifications, rather than a six digit code, you would have to continue using Microsoft Authenticator. The same is true of services protected by Duo.

Any site that recommends Google Authenticator, or Authy, or other standard TOTP apps can have its one-time passwords stored in 1Password. When I migrated my accounts, I just went down my list of services in each app (assuming they were standard one-time passwords), and one by one navigate to the service, disable two-step authentication, and re-enable it and scan the new QR code in 1Password. After I had migrated all my services, I'd do one last double confirmation that I had saved the new recovery codes, and verified that all of the one-time passwords stored in 1Password work as expected, then delete the services from the outgoing app.

Let me know how you get on with that, or if you run into any trouble along the way!

Jack

Thanks--especially for the advice about the push notifications, as I do have a couple of those and was wondering how they would work. Is there any best practice about storing the recovery codes? I've never needed to actually use one before, but I've just been keeping them in the notes field of the related password.

/mike

@mitchellzone

Thanks for the reply. I personally store the recovery codes in the notes field of a login item as well. Not only is 1Password the most secure location that I have for these codes (keeping them encrypted and backed up to my 1Password account) but it also ensures that the recovery codes are available on all of my devices in case I run into an issue.

Please let me know if you have any other questions. 😊