• Opisek@piefed.blahaj.zone
      link
      fedilink
      English
      arrow-up
      2
      ·
      6 hours ago

      If it’s alright with your threat model, you can put the time-based OTPs into your password manager of choice, like Bitwarden. Upon filling your username and password, it places your OTP in your clipboard, so that you can simply paste it in. This does of course reduce the security of the system slightly, since you centralize your passwords and your OTPs. When opting for this method, it is therefore imperative to protect your password manager even more, like via setting up 2FA for the password manager itself or making sure your account gets locked after something like 10 minutes of inactivity. The usability aspect is improved by using a yubikey or another similar physical key technology.

      • Victor@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        4 hours ago

        Very good point. I have Bitwarden set up as a passkey for at least one account. I should remove that. 👍