News for hackers. Stuff that matters.

A comment on Don't store TOTP in Bitwarden for your online accounts (2022). Parent comment

Re:Don't store TOTP in Bitwarden for your online accounts (2... by nixcraft on Wednesday January 25, 2023 @03:51PM (#34523993)
Keepassxc allows you to store those TOTP codes and lock your password database using Yubikey. Even if someone stoles your password database file, it won't work as the attacker needs your Yubikey too.
[ Parent | on HN ]
Re:Don't store TOTP in Bitwarden for your online accounts (2... by drdaeman on Wednesday January 25, 2023 @03:55PM (#34524052)
> Even if someone stoles your password database file, it won't work as the attacker needs your Yubikey too.

It's the same with any password manager. The issue is, after someone somehow had one peek at the decrypted data, they have all the TOTP seeds they need so they no longer care.

[ Parent | on HN ]
Re:Don't store TOTP in Bitwarden for your online accounts (2... by zuhsetaqi on Wednesday January 25, 2023 @04:01PM (#34524129)
Bitwarden allows that too
[ Parent | on HN ]