4 ms·
this might be a dumb question - but if the password was unique to that account AND you have 2 factor auth enabled, is there any reason you need to change the pa
by misiti3780 10y ago
this might be a dumb question - but if the password was unique to that account AND you have 2 factor auth enabled, is there any reason you need to change the password ?
so if some hacker somehow manages to backward engineer a salted-bcrypted-hash of my unique password, he still cant get in without my cell phone
- vemv 10y agohe could attemp to reuse the password in other websites
- nighthawk454 10y agoPerhaps they won't get into your account without your password and phone. However, you've reduced your 2-Factor to 1-Factor since the password is now known. You're still relatively safe - at least safer than not having 2-Factor auth - but changing passwords is cheaper than the risk of relying on 1-Factor auth.