1047
What a life (media.piefed.world)
submitted 1 year ago by to c/memes@lemmy.world
42 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 1 year ago (3 children)

FYI everyone, you can install an authenticator app (like KeePassXC) on your laptop, so you don't need to use your phone.

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] 4 points 1 year ago (1 child)

    Wouldn't recommend putting your MFA in your password manager. You'd only have one attack entry point.

    The point of MFA is that you have multiple, so if one ever gets breached, they still wouldn't be able to get into your accounts.

    Now, if they can get into your password manager, it is over.

    Though keepass is a pretty good local one, can recommend.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 year ago*

    TOTP ≠ MFA.

    The purpose of TOTP is to use 1-time codes instead of (or in addition to) passwords, and doesn't require multiple devices.

    The purpose of MFA is to ensure the user uses multiple devices to log in. In practice, MFA isn't usually implemented correctly, as it only requires a phone and no other device to log in, so it's not true MFA. MFA is sometimes implemented with RFC 6238 (TOTP), but for example getting a text message or email with a log-in code is not that.

    Your password manager should use a secure password so that attackers can't get into it. It's more secure than a phone, which often use few-digit passwords or, god forbid, fingerprints or face scans to unlock.

  • permalink
  • fedilink
  • source
  • parent