3 ms·

I'm not sure I'd recommend that. If your password are compromised would you want your 2FA compromised as well? Also the answer to your question is the first re

• TimTheTinker 8y ago
  2FA in 1Password is premised on (1) 1Password use (with 2FA) being more secure in general than using 2FA and not a password manager, and (2) your 2FA key is more secure within the 1Password vault than it would be in Google Authenticator or similar. I think these premises are mostly correct, especially because 1Password enables use of practically uncrackable unique passwords for each service, and because getting into the vault requires 2 auth factors. If there's any risk of an attacker breaching your 1Password vault, I don't know if it's even worth talking about whether you have 2FA enabled for accounts -- at that point it's very likely they also have access to whatever you'd have used for 2FA also. (One exception might be if a AgileBits insider were to install malicious code into the 1Password client. In that case, those who use 2FA outside 1Password would be significantly less vulnerable.)