Comment on Google Says Sorry After Passwords Vanish For 15 Million Windows Users.

• Hexarei@programming.dev ⁨3⁩ ⁨months⁩ ago

  So does keepass

  source
• Allero@lemmy.today ⁨3⁩ ⁨months⁩ ago

  Yep, and Vaultwarden too!

  source

  • dan@upvote.au ⁨3⁩ ⁨months⁩ ago

    The most secure practice for any high-value accounts (email etc) is to use WebAuthn with a hardware key like a Yubikey.

    TOTP is still vulnerable to phishing (a fake login page can ask for both a password and a TOTP code) so business/corporate environments are moving away from them.

    source

    • Allero@lemmy.today ⁨3⁩ ⁨months⁩ ago

      Sure, hardware keys are superior!

      I’m only talking about best practtices when using TOTPs in particular.

      source
  • Mwa@thelemmy.club ⁨3⁩ ⁨months⁩ ago

    Alr

    source
• qaz@lemmy.world ⁨3⁩ ⁨months⁩ ago

  It is a paid feature though if you don’t selfhost

  source

  • Mwa@thelemmy.club ⁨3⁩ ⁨months⁩ ago

    Oh

    source

    • TurdMongler@lemmy.world ⁨3⁩ ⁨months⁩ ago

      But it’s cheap! $10 a YEAR when I last checked.

      source

      • Mwa@thelemmy.club ⁨3⁩ ⁨months⁩ ago

        alr

        source
  • dan@upvote.au ⁨3⁩ ⁨months⁩ ago

    The paid features aren’t free if you self-host either. They’re free if you use Vaultwarden though.

    source
• Dreamless4561@sh.itjust.works ⁨3⁩ ⁨months⁩ ago

  Yep, for only $10 per year. But just make sure to keep backups of your vault and/or make an emergency kit.

  source