84
Password manager woes. How have you solved syncing on Android? (lemmy.world)
submitted 7 months ago by to c/selfhosted@lemmy.world
84 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 7 months ago (7 children)

Do you store TOTP in a seperate KeePass?

For me swappog between two Keepass DBs is annoying. I can't find anything that will sync my 2FAs.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 5 points 7 months ago (5 children)

    I don't. Kinda seems silly to me.

    To access a keepass file you already need 2 factors: the master password and access to the file.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 0 points 7 months ago (4 children)

    Its not really 2 factors if it's stored in the same DB though.

    I came from Bitwarden where the community recommendation was to not store passwords and 2FA together in the cloud. If a beach orccurs and you lose both then there wasn't a point in having the 2FA.

    Less of a risk with a local solution but still not sure.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 7 months ago

    Yes, it is two factor, it's just that there is no additional factors required to get the TOTP.

    If you don't use a password manager then you just remember your passwords. In this case the second factor is having access to a device that has your TOTP generator.

    If you use keepass then you remember the password for your password db, and to access your passwords or TOTP you need access to a device with your keepass db.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 7 months ago (2 children)

    If u have 2fa in the same database u can login on devices you don't trust. E.g. a coworkers computer/public computer in library.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •