Privacy

32156 readers

945 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

[email protected]

Separate 2FA OTP app from my password manager (self.privacy)

submitted 4 months ago* (last edited 4 months ago) by slug to c/[email protected]

26 comments fedilink hide all child comments

Do you think it's worth keeping 2FA OTPs in a separate source from your password manager? Currently I keep them in Bitwarden. I was thinking keeping them separate could add a little extra security in case my BW was cracked, but not sure it's worth the hassle of loading a second app for logins.

Do you know of an app that does 2FAs as conveniently as Bitwarden, in that it has mobile apps, browser extension, etc that can all access the same vault?

here's one i came across from an awesome-selfhosted list. i would need to test the PWA experience https://github.com/Bubka/2FAuth

you are viewing a single comment's thread
view the rest of the comments

[–] GustavoFring 3 points 4 months ago (2 children)

Proton Pass and Ente Auth are both convenient and secure imo.

[–] slug 1 points 4 months ago (2 children)

Ente looks really nice but I wish it had a Firefox addon

[–] UnfortunateShort 1 points 4 months ago* (last edited 4 months ago) (1 children)

They do have desktop apps at least. I'm happy with it so far, totally second the recommendation.

Regarding your general question: I would argue that a separate 2FA app is a must, since you can not only secure your password manager with it, but also remain protected if it is breached somehow.

Having 2FA and credentials in one place partly breaks the rational between having 2FA at all.

[–] slug 1 points 4 months ago (2 children)

i just realized i set up ente but put the login for it in my bitwarden. that kind of defeats the purpose. so i guess i would need to save the ente creds outside of bitwarden... then i need a second 2FA source for that... endless cycle...

[–] GustavoFring 1 points 4 months ago

Well yes and no. You would still need access to your email as well for the login approval on ente auth.

[–] UnfortunateShort 1 points 4 months ago

I don't bother with 2FA for Ente. It's supposed to add a layer of security, no need to add yet another layer just for the sake of it.

[–] AbidanYre 1 points 4 months ago

I think auth is a pretty recent addition to ente's lineup.

I self host photos and their customer service has still been pretty responsive, so it may be worth reaching out and asking if a browser extension is on the roadmap.