4 ms·
It's slightly less secure, in the sense that if someone gains access to your password database they'll have access to your MFA codes as well. The only scenario
by bigDinosaur 5y ago
It's slightly less secure, in the sense that if someone gains access to your password database they'll have access to your MFA codes as well. The only scenario this would really matter in is if something like your phone or laptop was stolen, but not both, and they already could unlock your database file.
Practically I'd say that using the TOTP functionality of your password manager is such a big win for the average user that I'd advise people use it without hesitation.
- petepete 5y agoIf you lock your password manager with a hardware security key, you get the best of both worlds. The NFC Yubikey works well in this niche.