Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

People advocating against storing 2FA codes in the password manager are correct from a purist perspective, but not from a pragmatic perspective if you ask me.

If my device is compromised, along with my device's password, as well as the password manager's password, then yeah... I'm screwed.

As long as I keep my devices up-to-date though, I believe the highest risk comes from state-sponsored actors. I've chosen convenience, and I've made my peace with it.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: