3 ms·
For interested readers: 1Password does a few more things. For example, you can add 2FA to 1Password logins, so that 1Password replaces Google Authenticator with
by WA 6y ago
For interested readers: 1Password does a few more things. For example, you can add 2FA to 1Password logins, so that 1Password replaces Google Authenticator with the immense advantage that you don’t have to setup 2FA again if you get a new device.
Just a happy 1Password user, nut related to them in any way.
- bjelkeman-again 6y agoThanks I didn’t know this.
- sygma 6y agoIs it really 2FA if your password and your token are on the same device?
- Skunkleton 6y agoYes. 2FA protects, among other things, against compromised passwords. Having both on the same device does not reduce this protection.
- sirn 6y agoOne could argue that authenticating via 1Password is already multi factor in itself e.g. Master Password is Something You Know as the first factor and access to a 1Password Vault is Something You Have as a second factor (since you cannot login to 1Password with just username and password, but also requires a Secret Key that can only be acquired from a device that already logged in). In this case TOTP acts more like an insecure one-time session key.
- jdeibele 6y agoI use LastPass for passwords and Authy for 2FA. I like the idea that two different programs have to be attacked to get access to Google, Facebook, etc. There's a little bit more friction than having both in one program but that's the point.