3 ms·
> 1) When you activate the service, you get a list of ten OTP codes that you should print and store in a safe place. The main problem with having a list of ran
by jcr 16y ago
> 1) When you activate the service, you get a list of ten OTP codes that you should print and store in a safe place.
The main problem with having a list of randomly generated OTP codes is, it very obviously looks like a list of randomly generated OTP codes!
A far better approach is to use the lines of a poem, prayer or even a list of motivational slogans or a grocery shopping list. You can even get more tricky with things like not using the first character or word of the lines. You always need to assume your list of OTP's will fall into the wrong hands, so your list should be protected by at least obfuscation and plausible deniability.
- ghshephard 16y ago99.9% of the time you aren't worried about someone getting your wallet and taking your password - You are worried about people phishing you, snooping, or otherwise cracking your password. You'll get a lot more bang for your buck defending against the high-probability attacks then being concerned about the theoretical, but highly unlikely vectors.