News for hackers. Stuff that matters.
Re:Ask HN: If I get locked out of everything, please try to ... by class4behavior on Monday December 12, 2022 @09:57PM (#33964142)
How many well-formed passwords can and will you remember? How often are you willing to change them afterwards? How secure is your 2FA app? How secure is your device against keylogging? How sure are you no one will watch what you've typed in or when you reveal it to fix a typing error? And so on. It isn't as if there are no issues with the classic way.

That's why you maintain the knowledge-possession separation at the access to your password manager (file) with a combination of a password and either a key file or hardware key.

If you store your secrets in encrypted files rather than specialized server solutions, it's also easier to separate and store them in different locations.

Re:Ask HN: If I get locked out of everything, please try to ... by Wowfunhappy on Tuesday December 13, 2022 @09:31PM (#33979308)
Sorry, I don't understand where you're going with your questions. I do use a password manager (Bitwarden). I do not use 2FA. I don't understand how using so-called 2FA but storing my secrets in the same place as my passwords would make me more secure.
Re:Ask HN: If I get locked out of everything, please try to ... by class4behavior on Tuesday December 13, 2022 @10:54PM (#33979830)
You should reread your own posts. I'm only responding to what you write yourself.

If you do not understand the purpose 2FA, there are plenty of online resources available.

As I explicitly wrote, you can store secrets in separate places, and if you don't, you still protect yourself against password recovery attacks or interception and add redundancy.