2 ms·
It isn't more secure if you use a secure password with the standard way of auth today. Especially not theoretically what relates to cryptography. Some common a
by raxxorraxor 3y ago
It isn't more secure if you use a secure password with the standard way of auth today. Especially not theoretically what relates to cryptography.
Some common attack vectors like phishing would be more secure since you more or less automatically generate different credentials for different services, just as you get different access tokens from your oauth service. Token theft is an issue too, but only ever partially compromises you for a limited time.
- mwwaters 3y agoHaving different passwords doesn't prevent phishing where you think you're logging into the service being phished. The hacker would also create a new TOTP on that service once they get in to that service.