Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ...
by stouset on Thursday May 04, 2017 @07:27PM
(#14269795)
If these backup codes are in your password manager, you're effectively* back to 1FA. Same with putting the TOTP seed into it.
* Yes, technically you need the 1Password file as well. But someone who compromises your machine will get access to both. Or if you have it synced to your phone and both are unlocked with a fingerprint, all someone needs is your device and a little effort to fool the fingerprint sensor.
* Yes, technically you need the 1Password file as well. But someone who compromises your machine will get access to both. Or if you have it synced to your phone and both are unlocked with a fingerprint, all someone needs is your device and a little effort to fool the fingerprint sensor.