3 ms·

A Yubikey or similar device is a good way to mitigate the damage of having your password manager's password stolen. https://bitwarden.com/help/article/setup-tw

• rvz 6y ago
  And for macOS users, Touch ID takes this further without any devices, dongles or passwords, which 1Password, Dashlane, etc already supports.
  • ciarannolan 6y ago
    It seems to me that Touch ID is slightly less secure, given that it stores your fingerprint on the device and you rely on the Apple module and crypto to be implemented securely. With a Yubikey, the only thing you have to do to stay secure is to not lose it or let others use it.
    • judge2020 6y ago
      The attack surface is larger but it's still not an attack almost anyone needs to worry about - a 0 day on the T2 (which has never been publicly found/reported on) is something only worthy of nation state attacks on other nation states.