922
These F-ing Logins Nowadays (lemmy.today)
submitted 1 day ago by to c/programmer_humor@programming.dev
220 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 23 hours ago (3 children)

What they're saying is that if all of the multiple factors are stored behind 1 master password in 1 service, the whole purpose of MFA is negated. You've just shifted the single point of failure from a website password to your Bitwarden master password.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 4 points 23 hours ago (2 children)

    True, but to access bitwarden you need a device already logged in to bitwqrden or the TOTP for bitwarden, so effectively overly 2FA.

    Also, the purpose of a password manager is unique secure passwords, so most users start off more secure.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -1 points 21 hours ago (1 child)

    You're not wrong at all that it's still more secure than most. But it's still not mfa in that case unless you have separate mfa to get into Bitwarden/LastPass/etc, THEN you could make an argument that it's mfa by proxy.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •