I spent the weekend switching 2FA services, and I wouldn't wish it on my worst enemy

I would rather wish that I could avoid some tech-adjacent chores forever. I can’t tell you how long I’ve put off cleaning my PC of dust bunnies, or organizing my tech cupboard with a system that doesn’t hinge entirely on broken boxes and serpentine piles of cables. But as I discovered this past month, none of these tasks quite compares to switching to a new two-factor authentication (2FA) service.

2FA, sometimes called MFA (multi-factor authentication), is one of the many pillars of my online security strategy. It works by issuing a time-based one-time code (TOTP) that serves as a secondary proof of identity when logging in to a service. If 2FA is enabled on a service and you don’t have a 2FA code to go with it, any sign-in attempt will fail. If passwords are my door locks, 2FA codes are the slam gates. They keep my various personal accounts beyond the reach of bad actors, even if they gain the keys to my digital castles.

As a result, picking a reliable, unbreakable, and accessible 2FA service one of the most important choices you can make. Unfortunately, when I chose my current provider nearly a decade ago, I wouldn’t have dreamed it would become such a problem for me in 2026.

Calling time on a clingy digital relationship

Sadly, I’m one of the many consumers who put all my eggs into the Authy basket. Initially, this didn’t seem to be a problem.

To be fair, Authy is still a brilliant service that offers multi-device synchronization for 2FA codes as its biggest selling point. It allows me to access them from practically any device whenever I need them. If I forget my primary phone with the Authy app installed, I could still use the browser extensions or use the desktop app to access my codes. This convenience, especially at a time when I started regularly switching phones for work, made the service a no-brainer for me.

While Authy’s synchronization smarts still work flawlessly, the platform’s development direction hasn’t inspired confidence. It has slowly wrestled control away from consumers, trending towards a mobile-first model by killing its desktop app and extensions. This, followed by numerous breaches in recent years, has left me feeling disillusioned.

Given that these issues have been affecting me for some time, why haven’t I moved earlier? Why now? I was all too aware of a problem with transitioning away from Authy: the platform makes it incredibly difficult.

Authy does not allow me to save codes for offline use, export to a backup file, or direct Authy-to-alternative imports. In short, there’s no one-click way to jump from one service to another.

I was therefore left with two options: stick with it or manually move my multiple 2FA accounts to a new service, brick by brick.

So yes, as much as I should’ve moved months ago, I didn’t like the idea of spending hours on this process. But, since I’ve been auditing the various services and apps I use daily and moving towards more accessible, thoughtful, and purposefully made products, it’s a process I can no longer afford to delay.

And of course, the longer I leave it, the more accounts I’d eventually need to transfer.

Picking a new 2FA service

The biggest decision I’ve had to make then is picking a new service. There is certainly no shortage of options. I could go with Google’s or Microsoft’s authenticators and put my eggs into a big tech basket, or I could opt for a smaller platform that gives me more control over my TOTPs.

Some contenders I considered included Aegis, an open source, DIY solution that unfortunately lacks the cloud smarts that made me fall in love with Authy. Then there’s Bitwarden Authenticator. Given that I use Bitwarden for my passwords, I certainly considered keeping all my security paraphernalia under one roof, but this would be a massive security faux pas. Then there’s 2FAS, a service I often see mentioned on forums. While it lacks cloud sync, it tempted me with its Google Drive-personal device storage model. I’m already far too reliant on Drive, though, and it’s an issue I’m looking to address in the future. I certainly wouldn’t want a service hinged on this relationship.

All services have their strengths and weaknesses, but after considering these various options, I eventually settled on Ente Auth.

Ente feels and functions much like Authy, but offers some important upgrades and perks that I value.

It offers similar cloud synchronization, allowing access to TOTPs across multiple devices and platforms, including desktop and web. Ente can be used entirely offline if desired, too, giving me future flexibility. Encryption forms a core part of its service too; exports and imports are encouraged, while I appreciate that the developers are fully aware of potential platform lock-in and guard against it.

More importantly, from a 2022 blog post, Ente confirmed that should Auth ever transition to a premium model, “existing users will be grandfathered in.” This gives me a taste of the developers’ community-first values.

Finally, factoring in Ente Auth’s simple aesthetics and sensible UX, it was the best option for my needs.

Transferring 2FA codes, brick by painful brick

Now comes the fun part.

As I mentioned, Authy doesn’t let users back up and transfer 2FA accounts. And, since it canceled its desktop app, there’s no longer a community workaround for exporting 2FA codes. I’m therefore forced to transfer one code at a time from Authy to Ente Auth.

This process isn’t as simple as copying down the code and adding it to the new service. Instead, the workflow is thus:

• Open Authy, and view the account details in question.
• Log in to that account using my details from my password manager and the 2FA code from Authy.
• Find the settings page on the account, disable 2FA, then re-enable 2FA using the new service.
• Once complete, I check whether the 2FA code works a second time by logging out and back in.
• If successful, I will delete the account in Authy. This helps me keep track of which accounts are still marooned on the service.
• Repeat a further 20+ times.

This entire process took me the best part of three hours this past weekend, since every account is different and I had to ensure I didn’t leave anything behind. But once complete, I felt at ease for the first time in years. I now have control of my 2FA codes. I immediately made an encrypted backup to my NAS just to feel something again. That feeling was unbridled relief.

Take your time when choosing your security services

I don’t want this article to come across as me simply bashing Authy. I have nothing but appreciation for the service after years of loyal service. It was my first 2FA service and taught me, then college-aged, how essential a multi-layer security approach is. But, given its shortcomings, there’s little doubt in my mind that switching providers is the best move for my long-term security management strategy.

If anything, I perhaps gave Authy a little too much time. I certainly suffered from decision inertia throughout this entire process, knowing full well that choosing a 2FA provider is more important than I initially thought. And this is ultimately the message I hope to leave you with. It’s incredibly important to weigh up the pros, cons, limitations, and possibilities with each service you join or subscribe to, especially if that service is charged with safeguarding your digital life.

For those considering Ente Auth as their 2FA service, be aware that it, too, has some shortcomings. It’s next to impossible to recover your various accounts if you lose your credentials, for instance. This is less of a problem for Authy users, who only need a phone number. Since Ente also offers a cloud-based 2FA service, you’ll need to accept that your data is stored on the company’s servers. Personally, I don’t find either problem to be a deal breaker, but your mileage may vary. Thankfully, as I mentioned, there are a multitude of 2FA services that’ll suit your needs.

Switching 2FA codes was definitely one of the more annoying tech chores I’ve ever had to complete, but it was certainly one of the more important ones I’ve tackled this year. At least after this laborious experience, cleaning my PC is something I’m actually looking forward to. My tech cupboard, however, might have to wait a little longer.