3 ms·
Storing the second factor in the same password manager as the password is a lot like having a post-it with the password on your desk: it's practical, but defeat
by gregoriol 6y ago
Storing the second factor in the same password manager as the password is a lot like having a post-it with the password on your desk: it's practical, but defeats the purpose.
But to add to this, I wouldn't ever set up a 2FA on a service that doesn't allow multiple second factors, and mostly static backup codes. Having only one (ie. device) is a much higher risk, of being locked out, than having the password stolen.
- vmception 6y agoIf your password manager is compromised you are screwed. When looking at the actual attack vectors though it is vastly improved: Mitigated - Online attacks on your account at any service Mitigated - In person attacks on your account due to post-it notes Mitigated - Losing your phone which was the only way you could generate a one time password All this drama is mitigated, turning a disaster into a 5 second recovery.
- TT3351 6y agoAt least I know whoever is using my password is siting at my desk looking at the post-it (provided of course they didn't photograph it). Point being: it doesn't entirely defeat the purpose, in a similar way to how TSA locks don't defeat thieves, but delay them/lead them to find a different target.