3 ms·
It's two-step with a unique key every login. It wipes out phishing, password reuse and password leaks as vectors.
by scrollaway 7y ago
It's two-step with a unique key every login. It wipes out phishing, password reuse and password leaks as vectors.
- professorTuring 7y agoIt doesn't wipe phising. Phising is getting more and more complex, now phising sites ask you for your ToTP to gain control to your account in real-time. And that's one of the origins of FIDO2. - https://fidoalliance.org/fido2/ https://fidoalliance.org/fido2/
- dmoy 7y agoWhat's the second factor for 1password?
- graeme 7y agoThey added 2fa with duo security + a few other methods.
- UncleMeat 7y agoUnique passwords wipe out password leaks as a vector. Anything where you type in a code is also still phishable.
- scrollaway 7y agoPeople can still log into your account if your unique password leaks. It just prevents them logging into your other accounts. Point is, TOTP isn't useless.