News for hackers. Stuff that matters.

A comment on Turn on MFA Before Crooks Do It for You. Parent comment

Re:Turn on MFA Before Crooks Do It for You by saulrh on Friday June 19, 2020 @10:51PM (#23581115)
Agreed. They live in BitWarden right next to the passwords. I lose some security, since compromising my password manager now also compromises my 2FA, but the password manager is itself behind 2FA, a Yubikey, and its backup codes are on paper in my safe.
[ Parent | on HN ]
Re:Turn on MFA Before Crooks Do It for You by justinc8687 on Friday June 19, 2020 @11:22PM (#23581300)
Yubikeys can do TOTP. Why not just store the secrets on the key itself?
[ Parent | on HN ]
Re:Turn on MFA Before Crooks Do It for You by saulrh on Saturday June 20, 2020 @12:01AM (#23581539)
Laziness, old Yubikey hardware that doesn't do TOTP natively, logging in to websites on my phone. I probably should upgrade, it's just pretty far down my to-do list.
[ Parent | on HN ]