News for hackers. Stuff that matters.

A comment on Bitwarden – Open Source Password Manager. Parent comment

Re:Bitwarden – Open Source Password Manager by brazzledazzle on Wednesday July 11, 2018 @03:33AM (#17505089)
Someone else pointed it out but it’s worth repeating that the convenience of having your 2FA on your laptop/desktop might be making a significant security trade off. It’s not really 2FA if it’s on the same device.
[ Parent | on HN ]
Re:Bitwarden – Open Source Password Manager by keehun on Wednesday July 11, 2018 @07:05AM (#17505965)
That’s true. I had lost sight of that... well, I wish more places would support a Yubikey!
[ Parent | on HN ]
Re:Bitwarden – Open Source Password Manager by LyndsySimon on Wednesday July 11, 2018 @11:12AM (#17507539)
Bitwarden itself allows you to require a Yubikey for each credential retrieval. I'm not sure how that would differ from having the Yubikey itself be the credential, from an attack surface standpoint.
[ Parent | on HN ]