News for hackers. Stuff that matters.

A comment on Google wants every account to use 2FA, starts auto-enrolling users.

Re:Google wants every account to use 2FA, starts auto-enroll... by benbristow on Wednesday November 03, 2021 @02:46PM (#29098751)
Can't say I disagree with this. I've been using 2FA on anything that supports it via Bitwarden's built in TOTP support for a while now (my Bitwarden is also protected by TOTP also).

Autofill username/password and the token is automatically copied to the clipboard on both desktop & iOS for inputting after entering credentials. Painless and secure.

[ Parent | on HN ]
Re:Google wants every account to use 2FA, starts auto-enroll... by brinox on Friday November 05, 2021 @06:25AM (#29117380)
It's very convenient, yes.

If your Bitwarden vault is compromised however, you only have a single factor, because both the password and the TOTP secret are stored in the same place.

[ Parent | on HN ]