view the rest of the comments
Selfhosted
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil.
-
No spam.
-
Posts are to be related to self-hosting.
-
Don't duplicate the full text of your blog or readme if you're providing a link.
-
Submission headline should match the article title.
-
No trolling.
-
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
-
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
To keep your two factor codes and passwords separate in the event that your password manager is breached.
Also if you need a 2FA code to log into your password manager, how are you going to get it if its in the password manager that you can't log into without the 2FA code inside it?
This question comes up all the time with KeepassXC... like its not a 2nd factor if the TOTP is in the same app as the password.
Factor 1 is knowing the master password, and
Factor 2 is having the password file.
Im not trying to suggest the KeepassXC is the best for all uses, but its sufficient for me in this context.
You can have a separate KeePass DB just for your TOTPs.
Seems s bit extra but ok.
Fair enough.
I decided against web/network-based password managers for my personal needs since the additional attack surface is a concern. A Keepass database file synced across machines strikes a good balance for me (requires password + keyfile to open). It's also simple to backup and protect.
So yeah, for you use case, I'd recommend Aegis Authenticator.
Also if someone gets into your password manager then they have all the keys to everything