4 ms·
I do. I keep my backup 2-factor authentication code for gmail in my Dropbox folder. Access to my Dropbox account would compromise my gmail account (and vice ve
by Pharylon 10y ago
I do. I keep my backup 2-factor authentication code for gmail in my Dropbox folder.
Access to my Dropbox account would compromise my gmail account (and vice versa, since I keep my backup Dropbox 2-factors in Google Drive). I consider these two accounts my most sensitive/critical accounts for that reason. Could I encrypt the files in Dropbox? Sure. But that would make it more difficult to get to those backup keys (I might be reading them off a text file from the Dropbox app on my phone, for instance).
Has this happened often? No. Like, literally once. But it has happened, and I need to be able to recover my backup 2-factor codes.
- x1798DE 10y agoIf they are your most critical accounts, why are you doubling the attack surface by allowing a compromise of either to compromise both?
- danieldk 10y agoI do. I keep my backup 2-factor authentication code for gmail in my Dropbox folder. Why not use a physical 2nd factor such as a U2F key?
- alphabettsy 10y agoThis is the whole purpose of using a password manager. 1Password is capable of providing OTP codes instead of something like Google Auth. Obviously this makes 1Password a single point of failure, but that's true of password managers in general anyways since people usually put all of their sensitive things into them. At least with 1Password you can isolate items into vaults.