4 ms·
On Android, I use FreeOTP; I can make backups with `adb`. Separately, I use KeepassXC (https://keepassxc.org https://keepassxc.org) and store all my 2fa seeds
by scrollaway 9y ago
On Android, I use FreeOTP; I can make backups with `adb`.
Separately, I use KeepassXC (https://keepassxc.org https://keepassxc.org) and store all my 2fa seeds in a dedicated (separate) 2fa database which I keep locked. You can also keep it in the same database as your password db if you want to trade the 2nd factor for convenience but still get the added benefit of one time passwords.
- philsnow 9y ago> I can make backups with `adb` does it follow that an attacker can make a "backup" of your 2fa codes as well, if they get ahold of your phone for a minute or two?
- craftyguy 9y agoNo, because you can (and should) disable usb connectivity/debugging.
- scrollaway 9y agoPhysical device access is where this kind of security ends. If someone stealing your phone just to get your 2fa codes is a threat vector for you, you should be using different/additional factors. In any event, as was pointed out, adb needs usb debugging turned on, which needs the device unlocked to be enabled.
- veeti 9y agoYou need to authorize each adb key on the phone, so a screen lock prevents this.