4 ms·

I've been using Authy as a backup for 1Password (previously BitWarden/LastPass)'s 2FA since in a worst-case scenario I can get a replacement SIM card from my ph

I've been using Authy as a backup for 1Password (previously BitWarden/LastPass)'s 2FA since in a worst-case scenario I can get a replacement SIM card from my phone network's store and get back into my 1Password account via recovery. This has had to be tested once when my phone got pickpocketed in Amsterdam. Is there a better alternative? Authy is fine for this use, the rest of my 2FA tokens are in 1Password itself.

9dev 2y ago
If you’re on a Mac and use Safari, it has a neat 2FA integration built in, which saves and autofills OTPs from iCloud Keychain.
- deleted 2y ago
  [deleted]
dotancohen 2y ago
If _I_ can get a replacement SIM card from your phone network's store, can I get into your 1Password account via recovery?
- benbristow 2y ago
  You'd need ID to get one. And you'd need the security key also. I guess there has to be a vulnerability _somewhere_ to make it possible to get back in again in an emergency.
  - dotancohen 2y ago
    ID can easily be social engineered. What is the security key?
    - benbristow 2y ago
      1Password accounts have a password and a security key/token you need to login.
    - SparkyMcUnicorn 2y ago
      The secret key a random 34 character key[0]. You can also set up a security key[1] as 2FA, in which case you'd need both the secret key and security key. You need to know the user/email, password, the secret key (and security key if you've added one) to get into an account. 1Password cannot recover your account for you. On a family or company account you can set up trusted members that can recover your account for you, but if everyone loses their credentials all at once then you're locked out forever and need to start over with new vaults. [0] https://support.1password.com/secret-key-security/ https://support.1password.com/secret-key-security/ [1] https://support.1password.com/security-key/ https://support.1password.com/security-key/
      - dotancohen 2y ago
        I see, thank you.

9dev 2y ago

If you’re on a Mac and use Safari, it has a neat 2FA integration built in, which saves and autofills OTPs from iCloud Keychain.

deleted 2y ago
[deleted]

dotancohen 2y ago

If _I_ can get a replacement SIM card from your phone network's store, can I get into your 1Password account via recovery?

benbristow 2y ago
You'd need ID to get one. And you'd need the security key also. I guess there has to be a vulnerability _somewhere_ to make it possible to get back in again in an emergency.
- dotancohen 2y ago
  ID can easily be social engineered. What is the security key?
  - benbristow 2y ago
    1Password accounts have a password and a security key/token you need to login.
  - SparkyMcUnicorn 2y ago
    The secret key a random 34 character key[0]. You can also set up a security key[1] as 2FA, in which case you'd need both the secret key and security key. You need to know the user/email, password, the secret key (and security key if you've added one) to get into an account. 1Password cannot recover your account for you. On a family or company account you can set up trusted members that can recover your account for you, but if everyone loses their credentials all at once then you're locked out forever and need to start over with new vaults. [0] https://support.1password.com/secret-key-security/ https://support.1password.com/secret-key-security/ [1] https://support.1password.com/security-key/ https://support.1password.com/security-key/
    - dotancohen 2y ago
      I see, thank you.