3 ms·
> If you use oathtool on your laptop, and the password is stored there as well, you're back to 1FA In estabilished terminology you don't need multiple independ
by fulafel 1y ago
> If you use oathtool on your laptop, and the password is stored there as well, you're back to 1FA
In estabilished terminology you don't need multiple independent devices. For example email "magic link" is a common second factor.
- Aachen 1y agoBecause it requires access to the email system, that's a separate system even if it's being forwarded so long as you have a valid login to the email server But, yes, the exact boundary is definitely debatable. It's clearly less secure than a separate token generator that you keep on your body at all times; clearly more secure than no second confirmation at all