Post #1334711
2026-04-12 15:39 UTC
Convenience rarely comes with security and/or resilience. TOTP is about having two separate parts of the auth process so that compromise of one is protected by the other. Don’t keep them in the same place.
Replies (1)
-
@Fiery@lemmy.dbzer0.com 2026-04-12 16:37
While having them grouped together in bitwarden creates a single point of failure, it does not undermine the value of TOTP too much. TOTP being about having two separate parts of the auth process is not its whole application. What TOTP is about is having a part of your auth that is One-Time-use, so even if your password got leaked/hacked/intercepted it is worthless to an attacker.