Google Authenticator Updated: Slower, Mandatory Click to Reveal

Re:Google Authenticator Updated: Slower, Mandatory Click to ... by gruez on Wednesday May 25, 2022 @01:00PM (#31507250)

>bitwarden seems to have 2FA baked in so it can be automated. I can't tell if that's worth doing or if it defeats the purpose

It most definitely defeats the purpose. Whether it's worth doing depends on how much you value your time and how secure you think the rest of your setup is (ie. if it's super secure the marginal security might not be worth the additional time).

[ Parent | on HN ]

Re:Google Authenticator Updated: Slower, Mandatory Click to ... by cweagans on Wednesday May 25, 2022 @01:21PM (#31507562)

> It most definitely defeats the purpose.

Why?

If your password manager password is compromised, you're pretty screwed no matter how you slice it. For most people that use a password manager, I would guess that exposing their main password is an unlikely scenario. Loss/theft of a phone seems much more likely, and in that scenario, you're exactly as screwed as you would be if you had all of your 2fa codes in your password manager.

[ Parent | on HN ]

Re:Google Authenticator Updated: Slower, Mandatory Click to ... by m-p-3 on Wednesday May 25, 2022 @07:44PM (#31512351)

Only if compromised. I prefer storing my sensitive data there, and also protect it with 2FA to make sure my extra long and unique passphrase is not the weakest link.

[ Parent | on HN ]