Re:Getting 2FA Right in 2019
by tptacek on Thursday June 20, 2019 @02:33PM
(#20235816)
I think you're thinking about this the wrong way. I trust 1Password. I trust it so much that I don't bother storing TOTP secrets in it, because I don't need a small extra dynamic password tacked on to the strong password it already generated for me. The threat stories where someone somehow captures my password but hasn't fully compromised either 1Password or the site I'm logging into (thus invalidating the credentials anyways) are extraordinarily narrow.
1Password TOTP is mostly just theater.