3 ms·
Ask HN: If a password manager stores your 2FA token is it still 2FA?
- tiernano 3y agoI suppose it depends on how secure the password manager is and how much security is built into it. I am using 1Password for most of my 2fa stuff (bar my personal and work office 365, plus Authy for some backup 2fa codes and stuff that won't export). Everything in 1pass is secured using my yubikey.
- spansoa 3y ago> I am using 1Password Quick question: in the desktop web app for 1Password I am asked for a 'secret key' (aswell as my master passphrase) and have to manually copy and paste it each time. How do you cope with this?
- tiernano 3y agoi have only been asked once when setting it up. Also, im running on a mac, so i unlock with Touch Id... i think you can do Windows Hello unlock on machines that have that feature turned on too...
- wasabinator 3y agoIt is if your password manager is offline and not synced to the cloud imho. I use the commandline password store for this reason.
- spansoa 3y agoIt's redundant having the two together. I suppose it still has the nicety of 'unphishable logins'. Personally though, I have a separate KeepassXC DB with all my 2FA stuff there. I use the Raivo OTP[0] app for TOTP. I would only open my 2FA DB when trying to recover from a lost/damaged/stolen device with my Raivo OTP creds in it. [0] https://raivo-otp.com/ https://raivo-otp.com/