Cryptopathic: The situation at LastPass may be worse than they are letting on

Re:Cryptopathic: The situation at LastPass may be worse than... by msravi on Saturday December 24, 2022 @04:51AM (#34115434)

> In particular, I don't see how 2FA is possible with this

Umm, why not?

First, you can use a different app (like aegis) to generate OTPs.

Second, pass has an extension (https://github.com/tadfisher/pass-otp) that can be used to generate OTPs.

Third, you can use something like oathtool to generate your otp using your totp secret

oathtool -b --totp "your-totp-secret"

[ Parent | on HN ]

Re:Cryptopathic: The situation at LastPass may be worse than... by eternityforest on Saturday December 24, 2022 @06:06AM (#34115811)

I'm not quite sure I understand this. It seems like a way to generate OTPs, but it doesn't solve requiring a second factor to access the vault.

[ Parent | on HN ]