1389
It's the dream (piefed.cdn.blahaj.zone)
submitted 10 months ago by to c/microblogmemes@lemmy.world
96 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 42 points 10 months ago (3 children)

A friendly FYI: having your passwords and MFA in one place partially defeats the purpose

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 23 points 10 months ago* (1 child)

    True, but the alternatives generally are either a pain in the ass or require yet another syncing service to have sensitive info just so I can access things reliably anywhere.

    It is still more secure than SMS and email based options.

    Besides, my vaultwarden still needs an MFA code to access in the first place, and that's handled by a separate generator.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 9 points 10 months ago (1 child)

    I get that not everyone wants to set up something like Aegis in combination with e.g. Syncthing.

    Of course it is still better than SMS and email, but I would recommend you check out Ente Auth and/or Proton Auth.

    Both are end to end encrypted and you would at least have it in separate apps

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 15 points 10 months ago (1 child)

    I'm willing to accept the slight security difference in exchange for the convenience of having access on a single app 99.9% of the time.

    To get into my Vaultwarden in the first place to get my info they'd first have to know my self-hosted server exists to target. And they'd need to compromise that MFA which is handled by a separate unrelated app.

    That's more than enough security for nearly everyone on the planet.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 10 months ago (1 child)

    Sure. But if your bitwarden is protected by a 50char password AND a yubikey, it's not that big of a tradeoff imo. That's what I do, but I have hundreds of MFA tokens and it was PAINFUL to auth a lot of the time when I was using an authenticator app.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 10 months ago

    They're exactly why I decided to accept the slight security downgrade for usability. Plus, at the time, finding a yubikey that would work with every device, desktop, laptop, mobile, etc. was impossible without dongles, kind of defeating the point. USB-C wasn't on everything then.

  • permalink
  • fedilink
  • source
  • parent