3 ms·
Misses the obvious (and highly effective) strat of using BW as a yubikey adapter. By this I mean: put BitWarden behind MFA login that requires (requires!) a har
by 1attice 4y ago
Misses the obvious (and highly effective) strat of using BW as a yubikey adapter. By this I mean: put BitWarden behind MFA login that requires (requires!) a hardware key; now, use BitWarden to store your TOTP; congratulations, you just moved all your TOTP MFA to a more-secure hardware token scenario.
do use BW for TOTP, but then add a hardware key. Boom. Better security and, just as important, only one site to tell about your yubikey (managing FIDO2 hardware across several websites puts it in now-you-have-two-problems territory)