2 ms·

Interesting, thanks! I guess you need to keep these QR codes/texts as carefully/securely as you would any password.... This is all a lot of work, trying to fi

• tzs 5y ago
  The good news is that the QR codes and/or texts should be easier to secure than passwords. You need the password every time you login to a site, so you need to find a way to securely store passwords that also allows easy frequent access to the password. You only need the QR code when setting up a TOTP application on one of your devices which generally will only be once per device and then once whenever you replace a device. You don't need frequent easy access and so can pick a storage method that is optimized toward ease of initial storage. For example if I've just signed up for site example.com and I've saved a screenshot of the QR code in example.png, I'd do this: $ gpg -ear tzs@mydomain example.png $ mv example.png.asc ~/OneDrive/totp-recovery $ rm example.png and then I no longer have to think about it or do anything with it unless I need to set up a new device, which is very rare.