Articles by Javier Tallón.

Portrait of Javier Tallón

Javier Tallón

Co-Founder & CBDO

LinkedIn

Escaping Authy: recovering 46 TOTP secrets from a walled-garden authenticator

A field report on migrating every second factor out of Authy: an instrumented mobile session that reads the app's TLS in cleartext with no hooks, the Play Integrity wall and the leaked-keybox game behind it, and decrypting the seed sync into portable otpauth:// URIs. The decryptor is published in full.

All articles

A necessary cookie remembers your choices for up to 180 days. Privacy policy.