6 ms·
I don't know about you but does anyone else screenshot (and even print physical copies of, to keep safe) their authenticator barcodes given by websites, in case
by supernova87a 6y ago
I don't know about you but does anyone else screenshot (and even print physical copies of, to keep safe) their authenticator barcodes given by websites, in case some day your chosen app dies or your phone(s)/tablets/everything gets lost?
- Hamuko 6y agoThat's really what scratch codes are for.
- deleted 6y ago[deleted]
- cuu508 6y agoYes, but not every service offers recovery codes.
- loloquwowndueo 6y agoThat’s like a must. Services that don’t probably have an easy way to reset your 2FA via email verification which entirely negates the benefit of 2FA (last line of defence if your password or email are compromised). You probably want to stay away from those services entirely.
- ffpip 6y agoI sometimes do that when I don't have to write them down.
- tarruda 6y agoAegis has an option to export an encrypted backup of the database. I export one every time I add a new code to the app.
- alexbakker 6y agoOne of the authors here. Recent versions of Aegis also come with an automatic backup feature, so that an export is created at a location of your choosing automatically every time a change is made to your entry list. Might be a little more convenient than doing manual exports every time.
- PascalW 6y agoThanks for pointing this out! I've been using Aegis for quite a while and didn't know this.
- dddw 6y agoYes, and the exact reason I use aegis (plus open source!)
- deleted 6y ago[deleted]
- jamiesonbecker 6y agoYou can use the QR codes to enroll new devices. (But then so can anyone who finds your QRs, so if you do this, keep them safe)
- Iolaum 6y agoYes I do keep backups.
- Youden 6y agoI put them into Bitwarden alongside the password. Yes, that means that there's a single place where both factors are stored but if Bitwarden has two-factor authentication (it does), the two factors are preserved.
- imiric 6y agoI use Aegis, but also import the TOTP URI to pass, and use it with pass-otp[1]. It kind of defeats the purpose of 2FA, but I keep my pass repo relatively secure, and the convenience is worth it. [1]: https://github.com/tadfisher/pass-otp https://github.com/tadfisher/pass-otp
- davchana 6y agoI keep screenshot of QR Codes, & phrases itself in a separate keypass database.
- m-p-3 6y agoI store my password manager (Bitwarden) TOTP code in my safe in QR code format. I keep all my other TOTPs in my password manager. My Bitwarden password is long (at least 40 characters long, I didn't count precisely) and never used or reused.
- mattrick 6y agoDoesn't it kinda defeat the point of storing TOTP codes in your password manager?
- swirepe 6y agoYou wouldn't need to store the codes, but you would need to store the key that makes the codes.
- m-p-3 6y agoIf it's secured by TOTP and a unique and secure password, it's not the weakest link.
- chromakode 6y agoThis reduces the attack scope from two devices to one. If your computer or web browser is compromised then both your TOTP secrets and password secrets are in one basket. Storing TOTP on a separate device can make it significantly harder to compromise your accounts.
- literallycancer 6y agoHe might be using two different password manager accounts, one for passwords and one TOTP? Although it doesn't help much if he logs in from the same machine anyway.
- cdurth 6y agoI would say not when you can secure bitwarden with a hardware key 2FA.
- 6y ago
- gbraad 6y agoAlways keep a hardcopy in a safe, for that day your phone is lost or dies. You don't wanna ask Amazon to remove your 2FA, as this involves paperwork. I learned the hard way, but luckily located backups
- pluc 6y agoYou really only not do this once. When you lose your phone, you learn.