3 ms·
Well, if you use a compromised device temporarily and your password gets stolen and you have 2FA, it will sort of be ok once you stop using that device.
by Tepix 4y ago
Well, if you use a compromised device temporarily and your password gets stolen and you have 2FA, it will sort of be ok once you stop using that device.
- bawolff 4y agoDepends how long your session cookie lasts for the site. Some high security sites are paranoid, but most of the time they last for like a year. It also depends on how sophisticated the attacker is. Do they fake log you out so they could capture a second 2fa token in order to change the totp token to a new device and change your email? And of course, for the most part damage can usually be done in minutes - copying confidential files does not need long term access.