3 ms·
The one place I intentionally don't have TOTP is my password manager. there is a base case somewhere in a backup strategy where TOTP is not feasible. The base
by unethical_ban 4y ago
The one place I intentionally don't have TOTP is my password manager.
there is a base case somewhere in a backup strategy where TOTP is not feasible. The base case for me is "Keepass file backed up to multiple locations and my master key written down in an envelope in my house in case I hit my head".
Why would I lock my passwords away behind a TOTP that can get lost? My TOTP in Authy is protected by a long random key. Where do I store the key? In my password manager.
You can't use a password manager and TOTP to back each other up.
- arepublicadoceu 4y agoI realise now that I was not clear on my post. Using TOTP or second factor is useful for those heathens that insist in using cloud based service for password manager (I'm one). Not for local keepass/pass synced by syncthing/rsync/ssh etc. I treat my kdbx as a single password encrypted backup of my bitwarden vault on my computer and external hard-drive. I care much less about second factor if it's something offline on my computer than something accessible by a web interface to anyone in the world.