4 ms·
2FA was created to guard against every single problem you mentioned. There is no concern that Aegis, which allows personal backups, management, and encrypted cl
by knaik94 4y ago
2FA was created to guard against every single problem you mentioned. There is no concern that Aegis, which allows personal backups, management, and encrypted cloud backups of the secret keys. PKA where I don't control the private keys doesn't seem more safe. Especially since passkeys are being marketed as a replacement to TOTP.
- stetrain 4y agoRight, so if the actual security is coming from the 2FA key and the password part is untrusted, then again why bother with the password? Also, does passkey necessarily mean you don’t control the private keys? A specific implementation like Google Password Manager may not give you access to those keys, but others like 1Password or KeePass should.