Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> (I don't think it is.)

If your master password is someone exposed, then nothing really protects you.




This is not true. 1Password could have a breach which exposes your master password. A hacker would then have access to your passwords, but not your 2fa. Even if you do not keep these items physically separated like a hardware token, it makes complete sense to have them be in different applications. For example, passwords in 1Password and tokens stored in Authy.


Wouldn’t an 2fa device (such as an otp token) actually protect you in this case? They have your password but not your otp generator.


Yes but to have your MP they'd most likely have rooted your device, they could surely do the same to your mobile.

If they could do one, they can do the other. Just a matter of efforts I guess




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: