Security

5072 readers

1 users here now

Confidentiality Integrity Availability

founded 5 years ago

MODERATORS

[email protected]

Does two-factor authentication with TOTP make sense in my case? (lemmy.ml)

submitted 3 weeks ago by [email protected] to c/[email protected]

5 comments fedilink hide all child comments

I store my mechanically generated passwords in 1Password. And I do not use the password in any way.

In such a case, does it make sense to activate TOTP? In my immature opinion, TOTP is only effective if you are using the same password for multiple websites. If this is incorrect, could you please tell me when TOTP would be useful?

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 5 points 3 weeks ago

There are 2 benefits of using TOTP here:

If an attacker gains access to your password, maybe through a keylogger or browser extension, the TOTP code will expire after a minute, and the attacker won't be able to log in later.

Using 2-factor authentication (in general) allows you to keep your login information on 2 separate devices, such as using your computer to store passwords, and your phone to generate TOTP codes. Most people (me included) will probably use 1 device for both though.