3 ms·
This just means the poster above doesn't consider a compromise of their password manager a risk. It remains 2FA because the key material for the OTP does not le
by hkt 7y ago
This just means the poster above doesn't consider a compromise of their password manager a risk. It remains 2FA because the key material for the OTP does not leave the password manager, whereas the password travels down the wire. For a start, this makes it hard to brute force the account for even an inept provider.
- kuon 7y agoI also have 2 db (KeepassXC), I have my low security db (like games, online stores, forums...) and my high security db (like AWS credentials...), the second one requires a hardware key for unlocking. But some websites (like some games) in the first category have mandatory 2FA.