Two-factor paper passwords

Re:Two-factor paper passwords by fredley on Tuesday May 03, 2016 @09:54AM (#11620631)

Your email address is your identity online - everything but everything assumes this. I have strong passwords and 2FA on my main account. If it was hacked, an attacker could (for example), reset my password for my national security vetting portal account. On there is available to anyone who has my login (no 2FA for this, obviously), forms which detail everything about me, my partner, my parents. My total, actual identity. I am compelled to use this service for the work that I do.

I hope neither it nor my email has any security breaches.

[ Parent | on HN ]

Re:Two-factor paper passwords by newjersey on Tuesday May 03, 2016 @11:08AM (#11621309)

Does it at least have a cool down period? Like if you try your username n times in the last hour, you get locked out and can't try any more for m hours?

[ Parent | on HN ]

Re:Two-factor paper passwords by fredley on Tuesday May 03, 2016 @11:16AM (#11621381)

I don't know, you tell me how secure you think it might be: https://www.nsv.mod.uk/

[ Parent | on HN ]

Re:Two-factor paper passwords by jsingleton on Tuesday May 03, 2016 @11:57AM (#11621769)

Well, as it only supports TLS 1.0 and SSL 3 (C grade on SSL labs), plus looks like it's running an old version of Web Forms, I think you're probably fine. :/

[ Parent | on HN ]