Re:Aegis Authenticator – Open-source 2FA for Android
by chromakode on Sunday January 17, 2021 @03:31AM
(#25809163)
This reduces the attack scope from two devices to one. If your computer or web browser is compromised then both your TOTP secrets and password secrets are in one basket. Storing TOTP on a separate device can make it significantly harder to compromise your accounts.
[ Parent
| on HN ]
Re:Aegis Authenticator – Open-source 2FA for Android
by literallycancer on Sunday January 17, 2021 @07:27AM
(#25810173)
He might be using two different password manager accounts, one for passwords and one TOTP? Although it doesn't help much if he logs in from the same machine anyway.