Given the news about Twitter eliminating SMS-based 2FA for free accounts, it's time to take a look at TOTP generator apps.
It is very surprising to me that so many infosec people are still recommending Google Authenticator and Authy. I would avoid both:
Google is not a company you should trust when it comes to user data privacy. Google Authenticator also does not have an easy way to do encrypted backups for 2FA secrets, unlike the options I will list later in the thread.
1/x
#cososec