4 ms·
I use Bitwarden. If someone owns my phone they’ll own all my apps so separating factors isn’t useful to me. I mostly use 2FA in case of a specific bug at a site
by ok_dad 4y ago
I use Bitwarden. If someone owns my phone they’ll own all my apps so separating factors isn’t useful to me. I mostly use 2FA in case of a specific bug at a site that allows for something like a password reset attack. I use a FIDO key for the important stuff, including Bitwarden, so I feel like that’s pretty good protection overall. I’ll never be a target of anything more than common criminals, too, never a nation state or anyone looking for crypto or anything.
- spiffytech 4y agoBitwarden's 2FA support is nice because you don't have to jump through hoops to copy out the original secret and use it somewhere else. It will also automatically put the 2FA code into your clipboard after you autofill your password.
- junon 4y agoJust be aware that it might violate your threat model depending on what you're protecting against. There's a benefit to having your second factor also be more or less separated from your password manager, especially for Bitwarden, which doesn't enforce that devices are registered to log in (unlike e.g. 1password does). I say this as a bitwarden user.