Lemmy.world Support

3230 readers

9 users here now

Lemmy.world Support

Welcome to the official Lemmy.world Support community! Post your issues or questions about Lemmy.world here.

This community is for issues related to the Lemmy World instance only. For Lemmy software requests or bug reports, please go to the Lemmy github page.

This community is subject to the rules defined here for lemmy.world.

To open a support ticket

You can also DM https://lemmy.world/u/lwreport or email [email protected] (PGP Supported) if you need to reach our directly to the admin team.

Follow us for server news 🐘

Outages 🔥

https://status.lemmy.world/

founded 1 year ago

MODERATORS

[email protected]

2FA with Keepass (lemmy.world)

submitted 1 year ago by [email protected] to c/[email protected]

7 comments fedilink hide all child comments

To integrate 2FA with keepass perform the following steps

Enable 2FA in settings, save it . If 2FA installation link button is not visible, refresh page to see it.
Copy the link and extract the secret key from it. Example: otpauth://totp/Lemmy.world:echo0618secret=XXXXXXXXXXXXXXXXXXXXXXX&algorithm=SHA256&issuer=Lemmy.world Here secret key = XXXXXXXXXXXXXXXXXXXXXXX
Go to keepass and setup your TOTP with the secret key and use custom setting to generate the key, with Algorithm = SHA-256, keeping the other settings unchanged

https://lemmy.world/pictrs/image/ace6eb80-daf0-4dcb-9a45-919ae9e74e4e.png

Save the TOTP changes. Go incognito mode and login.

top 6 comments

sorted by: hot top controversial new old

[–] [email protected] 10 points 1 year ago (3 children)

While it's possible, I believe it's still best to seperate your passwords and 2FA.

Saving both in one place kinda defeats the purpose of 2FA.

[–] [email protected] 3 points 1 year ago

True. PSA: if you want the convenience of something like Authy, but with an open source e2e approach: there’s Ente Auth. I’m using it since about a month.

https://github.com/ente-io/auth

[–] [email protected] 2 points 1 year ago

yep this is the way

[–] [email protected] 2 points 1 year ago* (last edited 1 year ago)

Agreed, don't do this. If your system is compromised, then the moment you unlock your Keepass database, even just once, the attacker now has both your passwords and your TOTP keys and can impersonate you anywhere.

Where I work we are phasing out TOTP in favour of FIDO2 keys, and the ability for users to store TOTP keys in a password database alongside their passwords is one of the key reasons.

[–] [email protected] 2 points 1 year ago

Been using KeePass for over a decade now and didn't realize it could do this. Thanks for the tip.

[–] [email protected] 2 points 1 year ago

Just a note that 2fa wouldn't have helped with the most recent vulnerability. The attackers were grabbing your already authenticated session and re-using that.

load more comments