2 ms·
One of the key benefits of storing TOTP seeds in a password manager is easier auto-completion (yes, I'm aware sharing is another one). I'd with multi-platform
by drdaeman 4y ago
One of the key benefits of storing TOTP seeds in a password manager is easier auto-completion (yes, I'm aware sharing is another one).
I'd with multi-platform password managers would have two different vaults, where one is for general computing and another is encrypted differently and only available for trusted always-available devices (phone, smart watch or something like that), and OTP seeds could be moved there and become accessible only to such trusted devices. Then, the password manager should be able talk to itself on those devices and ask them to provide an OTP (depending on user preferences, with or without on-device confirmation), so the seed isn't available but the current OTP value is conveniently accessible. Tricky, complicated, but secure and convenient.
But that's ultimately a hack. The best one could hope for is WebAuthn eventually killing TOTP entirely.