5 ms·
I can never recommend 1Password enough. When it comes to hosted options, they are hands down the best. Worth pointing out that they also have integrated 2FA, i
by SparkyMcUnicorn 4y ago
I can never recommend 1Password enough.
When it comes to hosted options, they are hands down the best. Worth pointing out that they also have integrated 2FA, if you're satisfied with first and second factor living in the same spot.
https://1password.com https://1password.com
- symlinkk 4y ago> if you're satisfied with first and second factor living in the same spot It’s no longer “2FA” then.
- robbintt 4y agoIt is still 2 factor, breaching the password manager is a corner case that you can decide to cover or not. It seems like for critical accounts you should NOT. For derived accounts, it should be better than just a password.
- lxgr 4y agoOnly very marginally so. Or what would you say storing a (unique, long) password next to a TOTP hash actually achieves?
- sceutre 4y agoWell the totp (even in your passwd manager) defends against phishing I'd thought vs password alone.
- lxgr 4y agoFor a "service based" password manager, sure. (It can prevent the service from ever handing over your encrypted database to an attacker.) In a local password manager, it doesn't work like that. A challenge-response mechanism can help there, but the cost/benefit analysis looks pretty different there, IMO.
- neurostimulant 4y agoEh, it's still a lot better than sms 2fa.
- sys_64738 4y agoThis costs a monthly subscription.
- fletchowns 4y agoI mean we're talking about a monthly fee that is less than a cup of coffee, it's not exactly an exorbitant amount
- SparkyMcUnicorn 4y agoGood. When it comes to hosted options, this is one I'd rather pay for to ensure long-term sustainability. If nobody is paying, they are probably the product.
- alfalfasprout 4y agoWhat about 1password is inherently safer though?
- SparkyMcUnicorn 4y agoI'd suggest reading their security page[0] and write ups others like Troy Hunt has done[1][2]. [0] https://1password.com/security/ https://1password.com/security/ [1] https://www.troyhunt.com/have-i-been-pwned-is-now-partnering-with-1password/ https://www.troyhunt.com/have-i-been-pwned-is-now-partnering... [2] https://haveibeenpwned.com/1Password https://haveibeenpwned.com/1Password
- NoPicklez 4y agoWhat exactly about 1Password is safer, including their cloud hosted options? Curious as I may switch.
- deleted 4y ago[deleted]
- NoPicklez 4y agoWhat exactly about 1Password is safer, including their cloud hosted options? Curious as I may look at multiple options.
- SparkyMcUnicorn 4y agohttps://news.ycombinator.com/item?id=33820779 https://news.ycombinator.com/item?id=33820779