Comment

Comment on BVG out here recommending the best 2FA Apps!

floridaman@lemmy.blahaj.zone ⁨11⁩ ⁨months⁩ ago

I self host Bitwarden (Vaultwarden) so I just use the built-in TOTP authenticator in the Bitwarden app. It’s nice to have it all in one place + having auto copy and paste when I log in. And because I self host, it’s all backed up securely and with (as far as I know) no real backdoors.

source

Sort:hotnew top

Winter8593@lemmy.world ⁨11⁩ ⁨months⁩ ago
No, please do not do this. Two factor authentication should be just that: two separate factors of authenticating yourself. Having them combined in one is the same as one factor.

source
- floridaman@lemmy.blahaj.zone ⁨11⁩ ⁨months⁩ ago
  Said in the reply to the other comment here, but I don’t really self host for security/privacy sake. And in addition to that comment I’d also like to say that I do use a YubiKey when possible for MFA. I’m not a security nut enough to care about TOTP (which kinda sucks anyway) all too much but for important things I do use physical MFA.
  
  source
  - jard@sopuli.xyz ⁨11⁩ ⁨months⁩ ago
    [deleted]
    source
    Dislodge3233@feddit.de ⁨11⁩ ⁨months⁩ ago
    I have a really long password on Bitwarden like 30+. I use OnlyKey to store this password on a hardware device.
    
    You mentioned phones. My problem with using another 2FA app is that it’s still on my phone.
    
    source
Undertaker@feddit.de ⁨11⁩ ⁨months⁩ ago
Yeah it compromises the idea of a second factor. Bitwarden is the wirst choice. It’s only one thing: comfortable

source
- floridaman@lemmy.blahaj.zone ⁨11⁩ ⁨months⁩ ago
  Fair, although I’ve said in a comment on this account somewhere else, I self host more for convenience sake than anything. I just like having my own password manager, sure it’s not as secure to use it for MFA but it’s better than giving my passwords to Google, LastPass, etc. and then using eg Google Authenticator. Self hosting is more a corporate distrust thing than a privacy thing for me
  
  source
ideonella@lemmy.one ⁨11⁩ ⁨months⁩ ago
I do the same thing. And Bitwarden’s 2FA is off my phone. In a complicated world, it’s reasonable to keep 1 password + 2FA as secure as possible. I simply can’t handle the hassle of pulling out my phone for every 2FA login, but still value the protection 2FA + randomly generated passwords provide.

source