Suggestion: Windows Phone Authenticator App

Can we please have this app for Windows Phone?

Thanks

I second this. I cant trust my android device (Galaxy note 1) with such a sensitive task as ive had to reset it nearly 10 times. After making a switch to windows phone, ive been having to still hang on to this old android phone mainly for the square enix token app.

Making an app of this kind is no big work (i know because im also a dev) so I dont see why its not developed yet. If it means asking me to do it, let it be so. Just as long as I can use my windows phone for generating tokens.

A community rep responded to a thread identical to this about a month or so ago saying they have no plans to bring this out. Doesn't mean it won't happen later down the road, but for right now y'all are out of luck :(

"Hello?

Are you from the RPG group playing tonight?

Oh, just wanted to warn you that Sanders, the necromancer, is going to be late tonight."

I'm a Windows Phone developer...would gladly work with SE to make this app for Windows Phone if they were interested...I sure hope they hire someone to do it soon...hell I'd do it for free just so all us Windows Phone users could have it :)

Yes please.

They would never work with the community to make this happen, and there's a very good reason why not too. These authenticators work on the basis of a seeded random number string, so to build an app, you would need to know the algorithm they use. By knowing the algorithm and taking a lucky guess at the seed, you would as a result have the tool required to crack the two factor authentication completely... for anyone's account.

I know this thread is getting old, but I would really, really love a WP8 authenticator for XIV :/ It's not like it would be difficult to do.

I'd like it if I could use the mobile version of the Lodestone in IE on my Windows Phone. >_<

Quote:

---

Originally Posted by Sparky

They would never work with the community to make this happen, and there's a very good reason why not too. These authenticators work on the basis of a seeded random number string, so to build an app, you would need to know the algorithm they use. By knowing the algorithm and taking a lucky guess at the seed, you would as a result have the tool required to crack the two factor authentication completely... for anyone's account.

---

Correct. If this were outsourced, and somebody were to leak the algorithm, they would have to change everything.

The chance of an authenticator being added to WP is slim seeing how minuscule the userbase is, but if enough people request it, it may happen.

I'd love the have a software token for windows phone. The only reason I still have my android tablet is for the software token app. It would be much easier for me to have it on the phone I use everyday.

can i have it ?

New PS4 player here with a windows phone! I've learned not to hold my breath about apps not coming to WP8, but this would be awesome.

Quote:

---

Originally Posted by Sparky

They would never work with the community to make this happen, and there's a very good reason why not too. These authenticators work on the basis of a seeded random number string, so to build an app, you would need to know the algorithm they use. By knowing the algorithm and taking a lucky guess at the seed, you would as a result have the tool required to crack the two factor authentication completely... for anyone's account.

---

Let's set aside the fact that the app wouldn't even have to know that algorithm (all you need to do is have it tell the server "I am a new authenticator, please generate a seed value for me"). "Taking a lucky guess at the seed"? If you've got that kind of luck, then you'd better hurry up and get to Las Vegas before they find out and ban you for life.

There's plenty of one-time password algorithms that are already publicly known. RFC 6238 is used in everything from Amazon to Wordpress, OPIE is included in FreeBSD by default...hell, even Blizzard's two-factor authentication has had its algorithm figured out. As long as the algorithm doesn't call for an incredibly stupid seed (say, an unsalted MD5 of a randomly chosen dictionary word), knowing it won't necessarily give you any sort of advantage.

So you found out that the secret seed value is generated by firing photons into a beam splitter. How exactly is that going to make it any easier for you to guess what the seed value for a given authenticator is?