• noodlejetski
    link
    fedilink
    12 years ago

    yeah, although using a password manager as a 2FA provider sort of negates the “2F” part.

    • AgileBed
      link
      fedilink
      12 years ago

      Depends. I use 1Password and let it store all my 2FA, because my 1Password login is secured with another 2FA.

        • Maestro
          link
          fedilink
          12 years ago

          I disagree. 2FA also protects against a breach/leak of the site. If your password is leaked or stored insecurely, then the 2FA still helps.

          • Negative_Pair_5694
            link
            fedilink
            12 years ago

            But to add to that as well: If the site has stored your password insecurely, they will probably have lost your 2FA secret too. Which even has to be stored in ‘plain text’ in contrast to your password.

        • phoenixes
          link
          fedilink
          12 years ago

          I think 2fa-in-your-password-manager is slightly better than not using it, since it requires that the attacker have access to your password vault, so it still protects against cases where just your password leaked somehow, but yeah, definitely not as good as full 2fa.

        • AgileBed
          link
          fedilink
          12 years ago

          Now imagine I would use a third 2FA app to store the second 2FA.