Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Depends on type of attack/level of security vs convenience. Having both username, password and TOTP in you password manager protects against password leaks from cloud services, but not from someone stealing/getting access to the content of your password manager. Having TOTP on separate device protects against both, but is also a bit more inconvenient in daily use.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: