Skip to main content
Information Security

Return to Question

Making it clear that the OP was talking about the TOTP seed, rather than a specific one-time key. Tidied the title.
Source Link
edit approved May 20, 2017 at 9:13
Duncan Jones
edit approved May 20, 2017 at 9:13
Duncan Jones
  • 1.7k
  • 1
  • 10
  • 14

Store Two Factor Authentication Is it secure to store a two factor authentication seed in a password manager - is it secure?

I wonder whether it is really secure to store the Two Factor Authentication seed code (e.g. the secret key for TOTP) within a password manager together with the user and password for the service.

If someone get'sgets access to the decrypted password database (e.g. while the password manager is unlocked or by brute forcing the master password), the attacker also has access to the TOTP token which makes Two Factor Authentication pretty useless.

In my eyes, storing the Two Factor Authentication code in the password manager is everything beyond secure.

Store Two Factor Authentication in password manager - is it secure?

I wonder whether it is really secure to store the Two Factor Authentication code (e.g. the secret key for TOTP) within a password manager together with the user and password for the service.

If someone get's access to the decrypted password database (e.g. while the password manager is unlocked or by brute forcing the master password), the attacker also has access to the TOTP token which makes Two Factor Authentication pretty useless.

In my eyes, storing the Two Factor Authentication code in the password manager is everything beyond secure.

Is it secure to store a two factor authentication seed in a password manager?

I wonder whether it is really secure to store the Two Factor Authentication seed code (e.g. the secret key for TOTP) within a password manager together with the user and password for the service.

If someone gets access to the decrypted password database (e.g. while the password manager is unlocked or by brute forcing the master password), the attacker also has access to the TOTP token which makes Two Factor Authentication pretty useless.

In my eyes, storing the Two Factor Authentication code in the password manager is everything beyond secure.

Tweeted twitter.com/StackSecurity/status/836393919298547712
deleted 1 character in body
Source Link
Programie
Programie
  • 411
  • 1
  • 4
  • 4

I wonder whether it is really secure to store the Two Factor Authentication code (for most services that'se.g. the secret key for TOTP) within a password manager together with the user and password for the service.

If someone get's access to the decrypted password database (e.g. while the password manager is unlocked or by brute forcing the master password), the attacker also has access to the TOTP token which makes Two Factor Authentication pretty useless.

In my eyes, storing the Two Factor Authentication code in the password manager is everything beyond secure.

I wonder whether it is really secure to store the Two Factor Authentication code (for most services that's TOTP) within a password manager together with the user and password for the service.

If someone get's access to the decrypted password database (e.g. while the password manager is unlocked or by brute forcing the master password), the attacker also has access to the TOTP token which makes Two Factor Authentication pretty useless.

In my eyes, storing the Two Factor Authentication code in the password manager is everything beyond secure.

I wonder whether it is really secure to store the Two Factor Authentication code (e.g. the secret key for TOTP) within a password manager together with the user and password for the service.

If someone get's access to the decrypted password database (e.g. while the password manager is unlocked or by brute forcing the master password), the attacker also has access to the TOTP token which makes Two Factor Authentication pretty useless.

In my eyes, storing the Two Factor Authentication code in the password manager is everything beyond secure.

Source Link
Programie
Programie
  • 411
  • 1
  • 4
  • 4

Store Two Factor Authentication in password manager - is it secure?

I wonder whether it is really secure to store the Two Factor Authentication code (for most services that's TOTP) within a password manager together with the user and password for the service.

If someone get's access to the decrypted password database (e.g. while the password manager is unlocked or by brute forcing the master password), the attacker also has access to the TOTP token which makes Two Factor Authentication pretty useless.

In my eyes, storing the Two Factor Authentication code in the password manager is everything beyond secure.