3 ms·
You actually do get additional security. A password (in my view) is disposable. I already assume that every site that I have an account for has been compromis
by joeblau 9y ago
You actually do get additional security. A password (in my view) is disposable. I already assume that every site that I have an account for has been compromised so the passwords 1Password is managing are burner passwords.
In order to get access to my account you'd need to know my 1Password master password (which is only in my head) in order to access anything that requires MFA/2FA. If someone hacks Amazon, Coinbase, Twitter, Dropbox, Google, or any other place and somehow figures out my password, they still can't log into my accounts.
Now in the case that one of those services gets hacked and they get access to more than user credentials e.g. all of the data/metadata; Then you're right, having MFA/2FA is useless.
- Password is for them
- TOTP is for me