• AgileBed
    link
    fedilink
    12 years ago

    Depends. I use 1Password and let it store all my 2FA, because my 1Password login is secured with another 2FA.

      • AgileBed
        link
        fedilink
        12 years ago

        Now imagine I would use a third 2FA app to store the second 2FA.

      • Maestro
        link
        fedilink
        12 years ago

        I disagree. 2FA also protects against a breach/leak of the site. If your password is leaked or stored insecurely, then the 2FA still helps.

        • Negative_Pair_5694
          link
          fedilink
          12 years ago

          But to add to that as well: If the site has stored your password insecurely, they will probably have lost your 2FA secret too. Which even has to be stored in ‘plain text’ in contrast to your password.

      • phoenixes
        link
        fedilink
        12 years ago

        I think 2fa-in-your-password-manager is slightly better than not using it, since it requires that the attacker have access to your password vault, so it still protects against cases where just your password leaked somehow, but yeah, definitely not as good as full 2fa.