top | item 39374930

(no title)

mejthemage | 2 years ago

I see other replies also recommending password managers

Why would I store my second authentication factor alongside the first? Aren't we effectively now back to 1FA?

discuss

order

notpushkin|2 years ago

I'd say password managers are a (slightly weaker) form of 2FA by design: it's something you have (a device with your password database installed) plus something you know (if using a master password) or something you are (if using biometrics).

Adding TOTP on top of that helps guard a bit more against some kinds of attacks. You can make it even stronger by not storing those keys in the same place and only using your phone, for example, but for some people (myself included) it's one bit too inconvenient. The good thing about using TOTP for 2FA is that you can find your own balance between convenience and security.