Re:Passwordless authentication with FIDO2–beyond just the web
by e12e on Wednesday February 22, 2023 @10:08AM
(#34896721)
> The only thing that no one can take from you is the things in your brain. I have a number of 10 character alphanumeric random passwords memorized, and I can use one of them as a master for a password manager...
Because keyloggers don't exist, and privileged processes can't read from ram?
I love bitwarden - but there are many ways my passphrase might be compromised. This is a little alliveated by 2fa - but unless the 2fa comes from a second hw device, there's almost complete overlap between threats that compromise my passphrase (for bitwarden) and my 2fa secret (in bitwarden or another 2fa app)...
Because keyloggers don't exist, and privileged processes can't read from ram?
I love bitwarden - but there are many ways my passphrase might be compromised. This is a little alliveated by 2fa - but unless the 2fa comes from a second hw device, there's almost complete overlap between threats that compromise my passphrase (for bitwarden) and my 2fa secret (in bitwarden or another 2fa app)...