News for hackers. Stuff that matters.
Re:Tell HN: It is impossible to disable Google 2FA using bac... by notpushkin on Thursday January 19, 2023 @02:44PM (#34444656)
I think using a password manager is already 2FA.

Something you have: a password database on your PC.

Something you know: your master password.

TOTP is a nice addon, but you can store it in the same password manager. It will still help with some attacks (e. g. if a hacker manages to MITM your traffic, they only get the password + one code, which is not sufficient to log in again).

There are no comments on this comment yet.