• Pika@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    7
    ·
    edit-2
    7 个月前

    I don’t care about a second layer of security on most of my things, like Lemmy for example, I really don’t care if it’s secure. My blizzard launcher, I really don’t care. my discord? ok maybe a little

    Being said due to this, I have both my TOTP and my Passwords in the same program. It still requires a second password to access, but it removes a little of the security. My vault is encrypted by a private key plus a password, and any type of off-system storage is encrypted an additional level past that, if someone gains access to that vault, I have far worse issues at hand then someone managing to steal my accounts.

    • schizo@forum.uncomfortable.business
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      7 个月前

      I have both my TOTP and my Passwords in the same program

      What’re you using for this?

      I’m using Bitwarden in a similar configuration but given they’re being funky about their definition of ‘open source’, I’m maybe looking for an alternate.

      • Pika@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        3
        ·
        7 个月前

        I’m using keepassXC with syncthing as my sync service, with my server as an encrypted longterm storage. It’s pretty flawless, just make sure that you keep file versioning on(its a setting in syncthing) for at least 2 versions, I haven’t had it happen yet but, with any dual system setup there might be a sync conflict if it fails to sync before being modified.