2 ms·

I just store my TOTP/MFA stuff in 1password, along with my username + password. I understand the risks here, but I prefer the tradeoffs vs. putting all my 2fa o

I just store my TOTP/MFA stuff in 1password, along with my username + password. I understand the risks here, but I prefer the tradeoffs vs. putting all my 2fa on a physical device that might get destroyed or stolen. My 1PW vault password is long and secure, and my devices are configured to require it.

kemotep 3y ago
My ideal future has 100% of my accounts (including bank) supporting passkeys, self-hosted bitwarden with security key for mfa (and backed up keepassxc file with copy of all passkeys and recovery codes stored encrypted in multiple places). Then from any of my devices as long as I have my security key accessible to unlock the vault, I can log into any account using public key cryptography. To get access to the vault you need my strong password, security key, and be on a device with access to the vault or the keepass file (with a different strong password). If I get a new phone or computer, I just need to add bitwarden and access to the network the vault is on and I will be set back up. House could burn down lose all devices including bitwarden host and the backup file would save me.