Privacy

31790 readers

357 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

Chat rooms

[Matrix/Element]Dead
Discord

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

[email protected]

Separate 2FA OTP app from my password manager (lemmy.world)

submitted 3 months ago* (last edited 3 months ago) by [email protected] to c/[email protected]

27 comments fedilink hide all child comments

Do you think it's worth keeping 2FA OTPs in a separate source from your password manager? Currently I keep them in Bitwarden. I was thinking keeping them separate could add a little extra security in case my BW was cracked, but not sure it's worth the hassle of loading a second app for logins.

Do you know of an app that does 2FAs as conveniently as Bitwarden, in that it has mobile apps, browser extension, etc that can all access the same vault?

here's one i came across from an awesome-selfhosted list. i would need to test the PWA experience https://github.com/Bubka/2FAuth

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 2 points 3 months ago (2 children)

Ente looks really nice but I wish it had a Firefox addon

[–] [email protected] 2 points 3 months ago* (last edited 3 months ago) (1 children)

They do have desktop apps at least. I'm happy with it so far, totally second the recommendation.

Regarding your general question: I would argue that a separate 2FA app is a must, since you can not only secure your password manager with it, but also remain protected if it is breached somehow.

Having 2FA and credentials in one place partly breaks the rational between having 2FA at all.

[–] [email protected] 1 points 3 months ago (2 children)

i just realized i set up ente but put the login for it in my bitwarden. that kind of defeats the purpose. so i guess i would need to save the ente creds outside of bitwarden... then i need a second 2FA source for that... endless cycle...

[–] [email protected] 1 points 3 months ago

Well yes and no. You would still need access to your email as well for the login approval on ente auth.

[–] [email protected] 1 points 3 months ago

I don't bother with 2FA for Ente. It's supposed to add a layer of security, no need to add yet another layer just for the sake of it.

[–] [email protected] 1 points 3 months ago

I think auth is a pretty recent addition to ente's lineup.

I self host photos and their customer service has still been pretty responsive, so it may be worth reaching out and asking if a browser extension is on the roadmap.