News for hackers. Stuff that matters.

A comment on Bitwarden Authenticator. Parent comment

Re:Bitwarden Authenticator by pooriamokhtari on Sunday February 23, 2025 @05:32PM (#43153864)
Having TOTP tokens stored alongside passwords kind of defeats the purpose of two-factor-authentication. I think this alone justifies development of a separate app, but there must be other reasons as well.
[ Parent | on HN ]
Re:Bitwarden Authenticator by znkynz on Sunday February 23, 2025 @05:38PM (#43153909)
Deffo a tradeoff. But then my bitwarden account is secured with a long phasephrase, and MFA (with offline recovery codes), with the TOTP in Google Authenticator. Its a tradeoff, but on balance, i am happy to keep my TOTP for accounts secured by bitwarden inside bitwarden.
[ Parent | on HN ]