4 ms·
That whole process in the top level comment is much faster, in practice, on my phone. Everything auto-fills (unless a site manages to fuck up their forms). I do
by wharvle 3y ago
That whole process in the top level comment is much faster, in practice, on my phone. Everything auto-fills (unless a site manages to fuck up their forms). I don’t typically have to type or manually copy anything, including 2fa tokens. Wait for the notification to ping, “fill from message” option, done.
I can often go through an entire sign-up, entering shipping, and payment, at a new site, without typing a single thing.
- hcurtiss 3y agoHow are you populating non-SMS 2FA codes automatically?
- InitialBP 3y ago1Password can do this for you, and I assume many other password managers as well. https://support.1password.com/one-time-passwords/ https://support.1password.com/one-time-passwords/
- sgarman 3y agoI use 1password but opt out of this feature. Just as described in the article masterpassword creates a single source of failure so I don't personally want to put more eggs in that basket.
- jorvi 3y agoI keep my unimportant 2FA in 1Password and the really important one’s (e-mail, domains, etc) in a separate 2FA app. If someone has pwned my 1Password I don’t really care if they log on to my Discord or order a limited amount of crap on Amazon because I am in much deeper shit at that point.
- Encrypt-Keeper 3y agoIt depends on the set of credentials. Your primary email address, your access to 1Password, things of that nature can and should be stored in a 2FA app on another device. But the majority of 2FA codes for most websites are fine to be stored in your password manager. This way you can enable 2FA on every site you use, without the inconvenience, but you can reserve the extra security of a second device for services that would be critical failure points for you.
- wharvle 3y agoThat, I don’t, but I only have those on work accounts anyway. None of my work stuff is set up to be as nice as my personal stuff, but that’s mostly outside my control. Oh, wait: Steam has them I guess. Every so often (once every few months?) I have to type in one of their codes. I did just check and I guess I could be doing this with non-sms codes if I added them to my password manager. If I had more than just Steam that used them, I’d do that.
- DHPersonal 3y agoApple hardware can auto-fill 2FA codes if the codes are set up in the Passwords tool on iOS/iPadOS/macOS, which are synchronized through iCloud.
- sage92 3y agoIf you use BitWarden paid version ($10/yr) then after an autofill of username/password, the totp is automatically added to the clipboard.
- alwayslikethis 3y agoKeepassXC can act as a TOTP client and can fill it just like it can do passwords.
- Aerbil313 3y agoiOS’s built in password manager iCloud Keychain does this automatically (at least on Safari).
- szundi 3y agoThis is slower than Apple Pay on the iPhone, I can assure you.
- wharvle 3y agoWell, yes (I also use Apple Pay when it’s available—best overall experience by a long shot) but it’s still quite fast and often involves no typing or copy-pasting.