this post was submitted on 22 Aug 2023
381 points (98.5% liked)

Technology

34989 readers
249 users here now

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.


Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.


Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

founded 5 years ago
MODERATORS
 

I personally am fine with this.

top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 104 points 1 year ago* (last edited 1 year ago) (3 children)

Yep, should be standard everywhere

..... for accounts you actually give a shit about

[–] spez_ 40 points 1 year ago

And not via SMS

[–] [email protected] 26 points 1 year ago* (last edited 1 year ago)

emphasis on the

… for accounts you actually give a shit about

[–] doink 39 points 1 year ago (3 children)

While you are adding this anyway consider using an open source app instead of google auth like aegis. There are many others but I wish I knew about them sooner.

[–] dyc3 7 points 1 year ago (2 children)

I personally love keeweb. Passwords and 2fa all in one place.

I mean you could argue that defeats the purpose of having 2fa, but it's convenient

[–] technojamin 6 points 1 year ago (1 children)

It weakens it a bit, but in my opinion it still has strength where it counts. If an attacker gets access to your password outside your password manager (man-in-the-middle, keylogger, phishing), then you’re still protected. Maybe it’s hubris in my own ability to keep my password manager safe, but I’ve never been worried about storing MFA in my password manager.

load more comments (1 replies)
[–] [email protected] 4 points 1 year ago (2 children)
load more comments (2 replies)
load more comments (1 replies)
[–] [email protected] 21 points 1 year ago (1 children)

Good, people are fucking stupid and if it effects others it's often better to choose the security for them!

[–] [email protected] 9 points 1 year ago (1 children)

Yup. I'm actually a bit baffled by how much negativity/misinformation there's around 2FA even in a place like this, which should naturally have a more technically inclined userbase.

[–] [email protected] 7 points 1 year ago

Well negativity is there because every app wants it.

I don't care if account x is compronised, as it has absolutly no value

[–] [email protected] 10 points 1 year ago (2 children)

2fa should be mandatory everywhere

[–] [email protected] 19 points 1 year ago (1 children)

Hard disagree. I do not want to have 2FA for every shittly little thing I do not care about.

load more comments (1 replies)
load more comments (1 replies)
[–] [email protected] 4 points 1 year ago* (last edited 1 year ago) (2 children)
[–] [email protected] 3 points 1 year ago (6 children)

2FA is the biggest bane to my productivity in the last 15 years, no part of my work life should require me to pull out my magic distraction device.

[–] [email protected] 24 points 1 year ago* (last edited 1 year ago) (4 children)

Use a password manager that lets you autofill 2fa, like Bitwarden.

load more comments (4 replies)
[–] [email protected] 12 points 1 year ago (2 children)

I don't like how a lot of things require their own custom app, especially when there's no automatic notification. I need to try and remember what the app is called, open it, navigate through, then approve it

load more comments (2 replies)
[–] [email protected] 11 points 1 year ago

Get a hardware 2FA key instead of using your phone for TOTP

[–] bilzen 6 points 1 year ago
[–] [email protected] 5 points 1 year ago

You can use KeePassXC to generate the TOTP codes on your PC. With the browser plugin, you can generate the code and fill the textbox with one click when the password database is unlocked.

Sites that don't use standard TOTP for 2FA are a pain in the ass though.

[–] [email protected] 4 points 1 year ago (1 children)

Authy has a desktop app and syncing across devices

load more comments (1 replies)
load more comments
view more: next ›