4 ms·
You shouldn't lose any security when your vault itself is protected with 2FA.
by sunaookami 3y ago
You shouldn't lose any security when your vault itself is protected with 2FA.
- OJFord 3y agoBut then it's barely better than 2FA vault & 1FA app. ('Barely' because it's like a bit of depth, and breadth into a few specific attacks revolving around the app's poor handling of your password.)
- lxgr 3y agoTheoretically that's true, but practically, Bitwarden (and any other browser-based extension capable of autofill) runs in a much less secure environment than e.g. Aegis or Google Authenticator on a smartphone, and people often keep it unlocked (or at least not requiring 2FA for every password access).