Subnostr

I understand that having an 2fa authenticator in the same password manager is perceived as going back to 1 factor but is that true?

Ok if I’m hacked then yes, but if a site gets hacked then i still have my 2fa

So it’s a trade off with convenience I guess? Maybe for some sites only you would like to have a 2fa separated and then the rest is ok?

Keith Mukai 2y ago

Don't do it!

https://youtu.be/Dp4-jacnyH4

Reply to this note

Please Login to reply.

Discussion

island 2y ago

Always keep PW & 2FA separate.

Cyphernomad 2y ago

And I disagree. Purism doesn’t help. If it gets to cumbersome, ppl will just not use it and deactivate it. I keep the 2fa of life destroying accounts on a separate offline store. The game account of my kids can be in the password manager because I prefer them using them with one click instead of not having it at all.

Keith Mukai 2y ago

It's not purism. If you want a second factor, have a second factor. If you don't, don't.

Cyphernomad 2y ago

Does it improve security by having 2fa in your password manager? It does as it covers additional cases you would be exposed otherwise. So, happy to continue disagreeing.